MAS - Digital Global Connectors, LLC - 47QTCA24D00DH

GENERAL SERVICES ADMINISTRATION

Federal Acquisition Service

Authorized Federal Supply Schedule FSS Price List

On-line access to contract ordering information, terms and conditions, up-to-date pricing, and the option to create an electronic delivery order are available through GSA

Advantage!®, a menu-driven database system. The INTERNET address GSA

Advantage!® is: GSAAdvantage.gov.

Multiple Award Schedule

FSC Group: Information Technology

Contract number: 47QTCA24D00DH

Contract period: August 1, 2024 through July 31, 2029

Digital Global Connectors, LLC, 4501 Singer CT, STE 300, Chantilly, Virginia, 20151-1734, Phone No. 571-239-4007

DGC (digitalglobalconnectors.com)

Contract Administration:

Yousif Mostafa yousif@digitalglobalconnectors.com

1775 Tysons BLVD, 5th Floor, Tysons, Virginia 22102

United States

Business size: Small Veteran-Owned Business

For more information on ordering go to the following website: https://www.gsa.gov/schedules.

Price list current as of Modification #[PS/PA/PO-XXXX] effective [effective date of Mod]

Prices Shown Herein are Net (discount deducted) https://digitalglobalconnectors.com/

CUSTOMER INFORMATION

1a. Table of awarded special item number(s) with appropriate cross-reference to item descriptions and awarded price(s).

SINs Recovery SIN Title

54151HACS 54151HACSRC Highly Adaptive Cybersecurity Services

OLM OLMRC Order Level Materials

1b. Identification of the lowest priced model number and lowest unit price for that model for each special item number awarded in the contract. This price is the Government price based on a unit of one, exclusive of any quantity/dollar volume, prompt payment, or any other concession affecting price. Those contracts that have unit prices based on the geographic location of the customer, should show the range of the lowest price, and cite the areas to which the prices apply. See Page 4

1c. If the Contractor is proposing hourly rates, a description of all corresponding commercial job titles, experience, functional responsibility and education for those types of employees or subcontractors who will perform services shall be provided. If hourly rates are not applicable, indicate “Not applicable” for this item. See Page 4

2. Maximum order:

SINs Maximum Order

54151HACS $500,000

OLM $250,000

3. Minimum order: $100

4. Geographic coverage (delivery area). Domestic

5. Point(s) of production (city, county, and State or foreign country). Same as Company Address

6. Discount from list prices or statement of net price. Government Net Prices (discounts already deducted.)

7. Quantity discounts. None

8. Prompt payment terms. Net 30 days. Information for Ordering Offices: Prompt payment terms cannot be negotiated out of the contractual agreement in exchange for other concessions.

9. Foreign items (list items by country of origin). Not Applicable

10a. Time of delivery. (Contractor insert number of days.) To Be Determined at the Task Order level

10b. Expedited Delivery. Items available for expedited delivery are noted in this price list. To Be

Determined at the Task Order level

10c. Overnight and 2-day delivery. To Be Determined at the Task Order level

10d. Urgent Requirements. To Be Determined at the Task Order level

11. F.O.B. point(s). Destination

12a. Ordering address(es). Same as Company Address

12b. Ordering procedures: See Federal Acquisition Regulation (FAR) 8.405-3.

13. Payment address(es). Same as Company Address

14. Warranty provision. Standard Commercial Warranty Terms & Conditions

15. Export packing charges, if applicable. Not Applicable

16. Terms and conditions of rental, maintenance, and repair (if applicable). Not Applicable

17. Terms and conditions of installation (if applicable). Not Applicable

18a. Terms and conditions of repair parts indicating date of parts price lists and any discounts from list prices (if applicable). Not Applicable

18b. Terms and conditions for any other services (if applicable). Not Applicable

19. List of service and distribution points (if applicable). Not Applicable

20. List of participating dealers (if applicable). Not Applicable

21. Preventive maintenance (if applicable). Not Applicable

22a. Special attributes such as environmental attributes (e.g., recycled content, energy efficiency, and/or reduced pollutants). Not Applicable

22b. If applicable, indicate that Section 508 compliance information is available for the information and communications technology (ICT) products and services and show where full details can be found (e.g.

contractor’s website or other location.) ICT accessibility standards can be found at:

https://www.Section508.gov/. Not Applicable

23. Unique Entity Identifier (UEI) number. SKQ3NQBEEMB6

24. Notification regarding registration in System for Award Management (SAM) database. Contractor registered and active in SAM

LABOR CATEGORY PRICING

SIN Labor Category GSA PRICE including

IFF

8/1/2024- 7/31/2025

GSA PRICE

including

IFF

8/1/2025- 7/31/2026

GSA PRICE

including

IFF

8/1/2026- 7/31/2027

GSA PRICE

including

IFF

8/1/2027- 7/31/2028

GSA PRICE

including

IFF

8/1/2028- 7/31/2029

54151HACS Governance Risk and Compliance (GRC) Specialist

– Subject Matter Expert Level 1

$98.53 $102.47 $106.57 $110.83 $115.26

54151HACS Governance Risk and Compliance (GRC) Specialist

– Subject Matter Expert Level 2

$115.92 $120.55 $125.38 $130.40 $135.62

54151HACS Privacy Specialist – Subject Matter Expert Level 1

$103.64 $107.78 $112.09 $116.57 $121.24

54151HACS Privacy Specialist – Subject Matter Expert Level 2

$120.91 $125.74 $130.77 $136.00 $141.44

54151HACS Privacy Specialist – Subject Matter Expert Level 3

$138.03 $143.55 $149.29 $155.26 $161.47

54151HACS Computer Security Incident Response Team (CSIRT) Specialist – Subject Matter Expert Level 1

$104.19 $108.36 $112.70 $117.20 $121.88

54151HACS Computer Security Incident Response Team (CSIRT) Specialist – Subject Matter Expert Level 2

$119.82 $124.61 $129.60 $134.79 $140.18

54151HACS Security Engineering Specialist – Subject Matter Expert Level 1

$102.77 $106.88 $111.15 $115.60 $120.22

54151HACS Security Engineering Specialist – Subject Matter Expert Level 2

$120.91 $125.74 $130.77 $136.00 $141.44

54151HACS Security Engineering Specialist – Subject Matter Expert Level 3

$138.03 $143.55 $149.29 $155.26 $161.47

54151HACS Security Engineering Specialist – Subject Matter Expert Level 4

$161.90 $168.38 $175.11 $182.12 $189.40

IFF

8/1/2024- 7/31/2025

GSA PRICE

including

IFF

8/1/2025- 7/31/2026

GSA PRICE

including

IFF

8/1/2026- 7/31/2027

GSA PRICE

including

IFF

8/1/2027- 7/31/2028

GSA PRICE

including

IFF

8/1/2028- 7/31/2029

54151HACS Security Engineering Specialist – Subject Matter Expert Level 5

$140.68 $146.30 $152.15 $158.24 $164.56

54151HACS Security Engineering Specialist – Subject Matter Expert Level 6

$154.51 $160.69 $167.11 $173.79 $180.75

54151HACS eDiscovery/Forensics Specialist – Subject Matter Expert Level 1

$98.53 $102.47 $106.57 $110.83 $115.26

54151HACS eDiscovery/Forensics Specialist – Subject Matter Expert Level 2

$115.92 $120.55 $125.38 $130.40 $135.62

54151HACS Identity Credentialing and Access Management (ICAM) Specialist – Subject Matter Expert Level 1

$119.24 $124.01 $128.97 $134.13 $139.49

54151HACS Identity Credentialing and Access Management (ICAM) Specialist – Subject Matter Expert Level 2

$140.28 $145.89 $151.73 $157.79 $164.10

54151HACS Identity Credentialing and Access Management (ICAM) Specialist – Subject Matter Expert Level 3

$172.90 $179.81 $187.00 $194.48 $202.26

54151HACS Security Operations Center Specialist – Subject Matter Expert Level 1

$106.10 $110.34 $114.75 $119.35 $124.12

54151HACS Security Operations Center Specialist – Subject Matter Expert Level 2

$114.45 $119.02 $123.79 $128.74 $133.88

54151HACS Information Assurance / Cybersecurity Specialist – Subject Matter Expert Level

$104.90 $109.09 $113.45 $117.98 $122.70

54151HACS Information Assurance / Cybersecurity Specialist – Subject Matter Expert Level

$123.41 $128.34 $133.48 $138.82 $144.37

IFF

8/1/2024- 7/31/2025

GSA PRICE

including

IFF

8/1/2025- 7/31/2026

GSA PRICE

including

IFF

8/1/2026- 7/31/2027

GSA PRICE

including

IFF

8/1/2027- 7/31/2028

GSA PRICE

including

IFF

8/1/2028- 7/31/2029

54151HACS Information Assurance / Cybersecurity Specialist – Subject Matter Expert Level

$141.91 $147.59 $153.49 $159.63 $166.02

54151HACS Cybersecurity Training Specialist – Subject Matter Expert Level 1

$75.25 $78.27 $81.40 $84.65 $88.04

54151HACS Cybersecurity Training Specialist – Subject Matter Expert Level 2

$94.81 $98.60 $102.54 $106.64 $110.90

54151HACS Cybersecurity Penetration Testing Specialist – Subject Matter Expert Level 1

$141.95 $147.64 $153.54 $159.69 $166.08

54151HACS Cybersecurity Penetration Testing Specialist – Subject Matter Expert Level 2

$167.00 $173.68 $180.63 $187.86 $195.38

54151HACS Cybersecurity Penetration Testing Specialist – Subject Matter Expert Level 3

$196.47 $204.33 $212.50 $221.01 $229.84

54151HACS Cybersecurity Anti-Phishing Specialist – Subject Matter Expert Level 1

$102.77 $106.88 $111.15 $115.60 $120.22

54151HACS Cybersecurity Anti-Phishing Specialist – Subject Matter Expert Level 2

$120.91 $125.74 $130.77 $136.00 $141.44

54151HACS Cloud Cybersecurity Specialist – Subject Matter Expert Level 1

$96.47 $100.33 $104.34 $108.51 $112.86

54151HACS Cloud Cybersecurity Specialist – Subject Matter Expert Level 2

$113.50 $118.05 $122.77 $127.68 $132.79

54151HACS Cloud Cybersecurity Specialist – Subject Matter Expert Level 3

$133.53 $138.87 $144.42 $150.20 $156.20

54151HACS Cybersecurity Audit Specialist – Subject Matter Expert Level 1

$115.92 $120.55 $125.38 $130.40 $135.62

54151HACS Senior Project Manager $186.65 $194.12 $201.88 $209.95 $218.36

IFF

8/1/2024- 7/31/2025

GSA PRICE

including

IFF

8/1/2025- 7/31/2026

GSA PRICE

including

IFF

8/1/2026- 7/31/2027

GSA PRICE

including

IFF

8/1/2027- 7/31/2028

GSA PRICE

including

IFF

8/1/2028- 7/31/2029

54151HACS Digital Forensics Analyst -- Senior

$149.32 $155.29 $161.51 $167.97 $174.69

54151HACS CND SOC Analyst -- Senior $149.32 $155.29 $161.51 $167.97 $174.69

54151HACS Cybersecurity Incident Response (CIRT) Analyst

$149.32 $155.29 $161.51 $167.97 $174.69

54151HACS Cybersecurity Analyst, SOC $122.80 $127.72 $132.83 $138.14 $143.66

54151HACS ISSO - Journeyman $122.80 $127.72 $132.83 $138.14 $143.66

54151HACS Cyber Compliance Analyst - Vulnerability Assessment - Journeyman

$122.80 $127.72 $132.83 $138.14 $143.66

54151HACS CND Analyst, Cyber Intelligence -- Senior

$149.32 $155.29 $161.51 $167.97 $174.69

54151HACS CND Analyst, CSIRT -- Senior $149.32 $155.29 $161.51 $167.97 $174.69

54151HACS Sr. Information Security Analyst, GRC

$149.32 $155.29 $161.51 $167.97 $174.69

54151HACS SME Information Security Analyst

$164.06 $170.62 $177.44 $184.53 $191.92

Service Contract Labor Standards: The Service Contract Labor Standards (SCLS), formerly known as the Service Contract Act (SCA), is applicable to this contract as it applies to the entire Multiple

Award Schedule (MAS) and all services provided. While no specific labor categories have been identified as being subject to SCLS/SCA due to exemptions for professional employees (FAR 22.1101,

22.1102 and 29 CRF 541.300), this contract still maintains the provisions and protections for

SCLS/SCA eligible labor categories. If and / or when the contractor adds SCLS/SCA labor categories to the contract through the modification process, the contractor must inform the Contracting Officer and establish a SCLS/SCA matrix identifying the GSA labor category titles, the occupational code, SCLS/SCA labor category titles and the applicable WD number. Failure to do so may result in cancellation of the contract.

Labor Category Labor Category Description Minimum Education

Minimum Years of

Experience

Governance Risk and Compliance (GRC) Specialist – Subject Matter Expert Level

• GRC Specialist L1s will assist and support senior staff to conduct security assessments including the review and analysis of system security documentation, security control artifacts, functional tests, etc.

• GRC Specialist L1s will compile assessment results into initial draft assessment package, organize assessment artifacts, and update client’s eGRC software to reflect current findings if applicable.

• GRC Specialist utilizes experience as a cyber security professional to provide policy, program and risk management support to federal clients.

• Uses experience with the NIST standards and special publications to maintain and update security policies, technical guidance, and Standard Operating Procedures (SOPs).

• Develop, review, analyze, document, and maintain current and new security process documents.

• Perform periodic reviews of documentation and current publications to identify and inform recommendations for improving policies, processes, and procedures based on new and/or evolving Federal standards, requirements and/or guidelines.

• Provide planning, documentation, logistics, and execution support for cyber security and risk management meetings, including meeting facilitation and documenting associated meeting minutes

Associates 3

Governance Risk and Compliance (GRC) Specialist – Subject Matter Expert Level

• GRC Specialist L2s will meet with system stakeholders to conduct security assessments including the review and analysis of system security documentation, security control artifacts, functional tests, etc.

• GRC Specialist L2s will compile assessment results into final assessment package, organize assessment artifacts, and update client’s eGRC software to reflect current findings if applicable.

• GRC Specialist L2s will work with system stakeholders to communicate assessment findings and provide recommendations for risk remediation.

• GRC Specialist utilizes experience as a cyber security professional to provide policy, program and risk management support to federal clients.

• Uses experience with the NIST standards and special publications to maintain and update security policies, technical guidance, and Standard Operating Procedures (SOPs).

• Develop, review, analyze, document, and maintain current and new security process documents.

• Perform periodic reviews of documentation and current publications to identify and inform recommendations for improving policies, processes, and procedures based on new and/or evolving Federal standards, requirements and/or guidelines.

• Provide planning, documentation, logistics, and execution support for cyber security and risk management meetings, including meeting facilitation and documenting associated meeting minutes

Bachelors 5

LABOR CATEGORY DESCRIPTIONS

Privacy Specialist – Subject Matter Expert Level 1

• Privacy Specialist L1s will assist senior staff to support Privacy functions to include all system of record processes such as Privacy Threshold Analysis (PTA), Privacy Impact Assessment (PIA), Privacy Act Statements, Privacy Policy Notices, Statement of Record Notices (SORN), Forms Reviews, etc.

• Ensure that the privacy program’s mission is fully integrated into the organization's efforts to protect and secure Personally Identifiable Information (PII)

• Coordinating and facilitating tasks to ensure compliance with the Federal privacy laws and regulations such as, the Privacy Act of 1974, as amended, the E-Government Act of 2002, and Office of Management and Budget memorandum and circulars.

• Assisting the Senior Agency Official for Privacy (SAOP)/ Chief Privacy Office (CPO) in complying with regulatory requirements such as annual privacy training, privacy risk management and compliance, FISMA requirements and reporting, supporting Exhibit 300 reviews, support for internal and external data calls, and responding to customer service requests

• Privacy training of Agency personnel to include initial New Employee Orientation (NEO) and on-boarding, annual, and role-based trainings to include updating and content development as necessary training.

• Supporting Privacy functions to include all system of record processes such as Privacy Threshold Analysis (PTA), Privacy Impact Assessment (PIA), Privacy Act Statements, Privacy Policy Notices, Statement of Record Notices (SORN), Forms Reviews, etc.

• Manage data calls, audit responses, teleconferences on behalf of the CPO in meetings, and serve as technical SME for response to inquiries.

• Manage, monitor and remediate suspected or confirmed Personally Identifiable Information (PII) breaches and provide executive level briefings of incident and remediation

Associates 3

Privacy Specialist – Subject Matter Expert Level 2

• Privacy Specialize L2s will manage data calls, audit responses, teleconferences on behalf of the CPO in meetings, and serve as technical SME for response to inquiries.

• Privacy Specialize L2s will manage, monitor and remediate suspected or confirmed Personally Identifiable Information (PII) breaches and provide executive level briefings of incident and remediation.

• Support reviews and update as necessary website Privacy policies, ADS 508 Privacy Program Policy, Privacy Program SOPs, and all required plans to include the Agency’s Incident Response plan, PII Holdings plan, all training plans, and Social Security Number (SSN) Reduction plan.

• Ensure that the privacy program’s mission is fully integrated into the organization's efforts to protect and secure Personally Identifiable Information (PII)

• Coordinating and facilitating tasks to ensure compliance with the Federal privacy laws and regulations such as, the Privacy Act of 1974, as amended, the E-Government Act of 2002, and Office of Management and Budget memorandum and circulars.

• Assisting the Senior Agency Official for Privacy (SAOP)/ Chief Privacy Office (CPO) in complying with regulatory requirements such as annual privacy training, privacy risk management and compliance, FISMA requirements and reporting, supporting Exhibit 300 reviews, support for internal and external data calls, and responding to customer service requests

• Privacy training of Agency personnel to include initial New Employee Orientation (NEO) and on-boarding, annual, and role-based trainings to include updating and content development as necessary training.

• Supporting Privacy functions to include all system of record processes such as Privacy Threshold Analysis (PTA), Privacy Impact Assessment (PIA), Privacy Act Statements, Privacy Policy Notices, Statement of Record Notices (SORN), Forms Reviews, etc.

• Manage data calls, audit responses, teleconferences on behalf of the CPO in meetings, and serve as technical SME for response to inquiries.

• Manage, monitor and remediate suspected or confirmed Personally Identifiable Information (PII) breaches and provide executive level briefings of incident and remediation

Privacy Specialist – Subject Matter Expert Level 3

• Privacy Specialist L3s will function as a team lead, overseeing Privacy initiatives, interfacing with client leads, and providing updates to the Project Manager.

• Privacy Specialist L3s will provide the Chief Information Security Officer (CISO) with Privacy program metrics and related information required to meet the organization’s FISMA SAOP privacy reporting requirements to include the agency’s Incident Response plan, PII Holdings plan, all training plans, and SSN Reduction plan.

• Ensure that the privacy program’s mission is fully integrated into the organization's efforts to protect and secure Personally Identifiable Information (PII)

• Coordinating and facilitating tasks to ensure compliance with the Federal privacy laws and regulations such as, the Privacy Act of 1974, as amended, the E-Government Act of 2002, and Office of Management and Budget memorandum and circulars.

• Assisting the Senior Agency Official for Privacy (SAOP)/ Chief Privacy Office (CPO) in complying with regulatory requirements such as annual privacy training, privacy risk management and compliance, FISMA requirements and reporting, supporting Exhibit 300 reviews, support for internal and external data calls, and responding to customer service requests

• Privacy training of Agency personnel to include initial New Employee Orientation (NEO) and on-boarding, annual, and role-based trainings to include updating and content development as necessary training.

• Supporting Privacy functions to include all system of record processes such as Privacy Threshold Analysis (PTA), Privacy Impact Assessment (PIA), Privacy Act Statements, Privacy Policy Notices, Statement of Record Notices (SORN), Forms Reviews, etc.

• Manage data calls, audit responses, teleconferences on behalf of the CPO in meetings, and serve as technical SME for response to inquiries.

Manage, monitor and remediate suspected or confirmed Personally Identifiable Information (PII) breaches and provide executive level briefings of incident and remediation

Masters 8

Computer Security Incident Response Team (CSIRT) Specialist – Subject Matter Expert Level

• CSIRT Specialist L1s will assist senior staff to support all CSIRT functions including daily monitoring of the organization’s information systems, vulnerability remediation, intrusion detection, log reviews and malware tracking as well as providing cyber threat analysis to proactively deter adversaries.

• Provide enterprise-wide management of security incidents in unclassified, organization-managed network space, to detect, respond and report all computer related incidents that includes daily monitoring of the organization’s information systems, vulnerability remediation, intrusion detection, log reviews and malware tracking as well as provide cyber threat analysis to proactively deter adversaries.

• Provide infrastructure, operations, and maintenance support for network-based intrusion detection systems (Debian GNU/Linux) and other Security Information tools such as Event Management solutions (Splunk) and Network Security Management solutions (Skybox Security and Nessus)

• Reporting of all information security incidents through the proper authority within the specified timeline

• Develop and updates as necessary all procedures to identify and respond to incidents, to prevent or limit damage to the organization’s assets.

• Creating and (when necessary) updating the incident response plan (IRP).

Associates 3

Computer Security Incident Response Team (CSIRT) Specialist – Subject Matter Expert Level

• CSIRT Specialist L2s will provide enterprise-wide management of security incidents in unclassified, organizations’-managed network space, to detect, respond and report all computer related incidents that includes daily monitoring of the organization’s information systems, vulnerability remediation, intrusion detection, log reviews and malware tracking as well as provide cyber threat analysis to proactively deter adversaries.

• Provide infrastructure, operations, and maintenance support for network-based intrusion detection systems (Debian GNU/Linux) and other Security Information tools such as Event Management solutions (Splunk) and Network Security Management solutions (Skybox Security and Nessus)

• Reporting of all information security incidents through the proper authority within the specified timeline

• Develop and updates as necessary all procedures to identify and respond to incidents, to prevent or limit damage to the organization’s assets.

• Creating and (when necessary) updating the incident response plan (IRP).

Security Engineering Specialist – Subject Matter Expert Level

Security Engineering Specialist L1s will:

• Conduct selected reviews of emerging technologies and practices and provide recommendations for developing security guidance and standards at the enterprise level applicable in the planning and implementation of enterprise cyber security services and technical approaches.

• Prepare gap analysis and develop a list of priority security requirements.

• Provide systems engineering subject matter expertise to meet critical needs for independent assessments, engineering studies, and systems engineering and integration to assess the potential viability and cost-effectiveness of security solutions and their alignment to the client information security architecture and policy.

• Provide enterprise systems engineering guidance, systems security technical guidance, expert technical advice, technology assessments (research and proof-of-concepts), analysis of alternatives (AoAs), and independent technical reviews.

• Perform technical reviews or assessments of external or community support systems proposed for use to support client missions.

• Provide Security analysis, Information Assurance (IA) coordination among the different teams and final recommendations of Software Approval Requests (SARs.)

• As required to support the government, the Contractor shall participate in IA meetings, boards such as Technical Review Board (TRB), Change Control Board (CCB), program management reviews, and other related meetings and provide analyses that include recommendations to enable the Government to make informed decisions.

• Develop and maintain Standard Operating Procedures (SOP) and Concept of Operations (CONOPS) for systems supported.

• Specify, design, procure, install, and configure equipment or products used by IA programs, such as:

• Security tools to support IA programs such as Skybox Security, Splunk SIEM, Nessus, Snort, CSAM and Infosec equipment, Intrusion detection and protection systems, Computer systems/encryption, firewalls, forensics, network, Intrusion monitoring, and system security audit products

• Maintain CISO engineering LAB, equipment, and inventory.

• Maintain IA email queues and resolve tickets.

Bachelors 2

Matter Expert Level

Security Engineering Specialist L2s will:

• Conduct selected reviews of emerging technologies and practices and provide recommendations for developing security guidance and standards at the enterprise level applicable in the planning and implementation of enterprise cyber security services and technical approaches.

• Prepare gap analysis and develop a list of priority security requirements.

• Provide systems engineering subject matter expertise to meet critical needs for independent assessments, engineering studies, and systems engineering and integration to assess the potential viability and cost-effectiveness of security solutions and their alignment to the client information security architecture and policy.

• Provide enterprise systems engineering guidance, systems security technical guidance, expert technical advice, technology assessments (research and proof-of-concepts), analysis of alternatives (AoAs), and independent technical reviews.

• Perform technical reviews or assessments of external or community support systems proposed for use to support client missions.

• Provide Security analysis, Information Assurance (IA) coordination among the different teams and final recommendations of Software Approval Requests (SARs.)

• As required to support the government, the Contractor shall participate in IA meetings, boards such as Technical Review Board (TRB), Change Control Board (CCB), program management reviews, and other related meetings and provide analyses that include recommendations to enable the Government to make informed decisions.

• Develop and maintain Standard Operating Procedures (SOP) and Concept of Operations (CONOPS) for systems supported.

• Specify, design, procure, install, and configure equipment or products used by IA programs, such as:

• Security tools to support IA programs such as Skybox Security, Splunk SIEM, Nessus, Snort, CSAM and Infosec equipment, Intrusion detection and protection systems, Computer systems/encryption, firewalls, forensics, network, Intrusion monitoring, and system security audit products

• Maintain CISO engineering LAB, equipment, and inventory.

Bachelors 4

Matter Expert Level

Security Engineering Specialist L3s will:

• Conduct selected reviews of emerging technologies and practices and provide recommendations for developing security guidance and standards at the enterprise level applicable in the planning and implementation of enterprise cyber security services and technical approaches.

• Prepare gap analysis and develop a list of priority security requirements.

• Provide systems engineering subject matter expertise to meet critical needs for independent assessments, engineering studies, and systems engineering and integration to assess the potential viability and cost-effectiveness of security solutions and their alignment to the client information security architecture and policy.

• Provide enterprise systems engineering guidance, systems security technical guidance, expert technical advice, technology assessments (research and proof-of-concepts), analysis of alternatives (AoAs), and independent technical reviews.

• Perform technical reviews or assessments of external or community support systems proposed for use to support client missions.

• Provide Security analysis, Information Assurance (IA) coordination among the different teams and final recommendations of Software Approval Requests (SARs.)

• As required to support the government, the Contractor shall participate in IA meetings, boards such as Technical Review Board (TRB), Change Control Board (CCB), program management reviews, and other related meetings and provide analyses that include recommendations to enable the Government to make informed decisions.

• Develop and maintain Standard Operating Procedures (SOP) and Concept of Operations (CONOPS) for systems supported.

• Specify, design, procure, install, and configure equipment or products used by IA programs, such as:

• Security tools to support IA programs such as Skybox Security, Splunk SIEM, Nessus, Snort, CSAM and Infosec equipment, Intrusion detection and protection systems, Computer systems/encryption, firewalls, forensics, network, Intrusion monitoring, and system security audit products

• Maintain CISO engineering LAB, equipment, and inventory.

Bachelors 6

Matter Expert Level

Security Engineering Specialist L4s will:

• Conduct selected reviews of emerging technologies and practices and provide recommendations for developing security guidance and standards at the enterprise level applicable in the planning and implementation of enterprise cyber security services and technical approaches.

• Prepare gap analysis and develop a list of priority security requirements.

• Provide systems engineering subject matter expertise to meet critical needs for independent assessments, engineering studies, and systems engineering and integration to assess the potential viability and cost-effectiveness of security solutions and their alignment to the client information security architecture and policy.

• Provide enterprise systems engineering guidance, systems security technical guidance, expert technical advice, technology assessments (research and proof-of-concepts), analysis of alternatives (AoAs), and independent technical reviews.

• Perform technical reviews or assessments of external or community support systems proposed for use to support client missions.

• Provide Security analysis, Information Assurance (IA) coordination among the different teams and final recommendations of Software Approval Requests (SARs.)

• As required to support the government, the Contractor shall participate in IA meetings, boards such as Technical Review Board (TRB), Change Control Board (CCB), program management reviews, and other related meetings and provide analyses that include recommendations to enable the Government to make informed decisions.

• Develop and maintain Standard Operating Procedures (SOP) and Concept of Operations (CONOPS) for systems supported.

• Specify, design, procure, install, and configure equipment or products used by IA programs, such as:

• Security tools to support IA programs such as Skybox Security, Splunk SIEM, Nessus, Snort, CSAM and Infosec equipment, Intrusion detection and protection systems, Computer systems/encryption, firewalls, forensics, network, Intrusion monitoring, and system security audit products

• Maintain CISO engineering LAB, equipment, and inventory.

Bachelors 8

Matter Expert Level

Security Engineering Specialist L5s will:

• Manage multiple lines of effort and security engineering projects

• Manage and mentor Senior (T1-T4) Security Engineers

• Assist L6 Security Engineer in training Senior Security Engineers to train Junior level Security engineers (T1-T3)

• Manage cross-disciplined “Tiger Teams” in other Security Lines of Effort, e.g., CSIRT, SOC, ICAM, Anti-Phishing where project or program responsibilities overlap leveraging the supervision of a L6 Security Engineer as needed.

• Interface with and advise Director Level and on rare occasions C-level client executives on Security Engineering Topics, Projects, and initiatives.

• Perform cross agency outreach with guidance and mentoring of Senior Federal clients.

• Conduct selected reviews of emerging technologies and practices and provide recommendations for developing security guidance and standards at the enterprise level applicable in the planning and implementation of enterprise cyber security services and technical approaches.

• Prepare gap analysis and develop a list of priority security requirements.

• Provide systems engineering subject matter expertise to meet critical needs for independent assessments, engineering studies, and systems engineering and integration to assess the potential viability and cost-effectiveness of security solutions and their alignment to the client information security architecture and policy.

• Provide enterprise systems engineering guidance, systems security technical guidance, expert technical advice, technology assessments (research and proof-of-concepts), analysis of alternatives (AoAs), and independent technical reviews.

• Perform technical reviews or assessments of external or community support systems proposed for use to support client missions.

• Provide Security analysis, Information Assurance (IA) coordination among the different teams and final recommendations of Software Approval Requests (SARs.)

• As required to support the government, the Contractor shall participate in IA meetings, boards such as Technical Review Board (TRB), Change Control Board (CCB), program management reviews, and other related meetings and provide analyses that include recommendations to enable the Government to make informed decisions.

• Develop and maintain Standard Operating Procedures (SOP) and Concept of Operations (CONOPS) for systems supported.

• Specify, design, procure, install, and configure equipment or products used by IA programs, such as:

• Security tools to support IA programs such as Skybox Security, Splunk SIEM, Nessus, Snort, CSAM and Infosec equipment, Intrusion detection and protection systems, Computer systems/encryption, firewalls, forensics, network, Intrusion monitoring, and system security audit products

• Maintain CISO engineering LAB, equipment, and inventory.

Masters 10

Matter Expert Level

Security Engineering Specialist L6s will:

• Manage multiple lines of effort and security engineering projects and/or programs

• Manage and mentor Senior (T3-T5) Security Engineers

• Train Senior Security Engineers in the ability to train Junior (and other Senior) level Security engineers (T1-T3)

• Manage cross-disciplined “Tiger Teams” in other Security Lines of Effort, e.g., CSIRT, SOC, ICAM, Anti-Phishing where project or program responsibilities overlap.

• Interface with and advise C-level client executives on Security Engineering Topics, Projects, and initiatives.

• Perform cross agency outreach on behalf of Senior Federal clients

• Conduct selected reviews of emerging technologies and practices and provide recommendations for developing security guidance and standards at the enterprise level applicable in the planning and implementation of enterprise cyber security services and technical approaches.

• Prepare gap analysis and develop a list of priority security requirements.

• Provide systems engineering subject matter expertise to meet critical needs for independent assessments, engineering studies, and systems engineering and integration to assess the potential viability and cost-effectiveness of security solutions and their alignment to the client information security architecture and policy.

• Provide enterprise systems engineering guidance, systems security technical guidance, expert technical advice, technology assessments (research and proof-of-concepts), analysis of alternatives (AoAs), and independent technical reviews.

• Perform technical reviews or assessments of external or community support systems proposed for use to support client missions.

• Provide Security analysis, Information Assurance (IA) coordination among the different teams and final recommendations of Software Approval Requests (SARs.)

• As required to support the government, the Contractor shall participate in IA meetings, boards such as Technical Review Board (TRB), Change Control Board (CCB), program management reviews, and other related meetings and provide analyses that include recommendations to enable the Government to make informed decisions.

• Develop and maintain Standard Operating Procedures (SOP) and Concept of Operations (CONOPS) for systems supported.

• Specify, design, procure, install, and configure equipment or products used by IA programs, such as:

• Security tools to support IA programs such as Skybox Security, Splunk SIEM, Nessus, Snort, CSAM and Infosec equipment, Intrusion detection and protection systems, Computer systems/encryption, firewalls, forensics, network, Intrusion monitoring, and system security audit products

• Maintain CISO engineering LAB, equipment, and inventory.

• Maintain IA email queues and resolve tickets.

Masters 12 eDiscovery/Forensics Specialist – Subject Matter Expert Level

Forensics Specialist L1s will:

• Assist and support senior staff to conduct eDiscovery and forensic operations.

• Support eDiscovery and Digital Forensic investigations on all types of devices (desktops, servers, mobile devices, removal media, Cloud Contractors, etc.)

• Provide digital forensic services to support Organization’s investigations and Insider Threat program.

• Provide eDiscovery services in response to ongoing Requests for Information (RFIs) from the Office of the Chief Information Officer (CIO).

• Provided comprehensive e-Discovery services, utilizing best practices to identify, preserve, recover, collect, analyze and minimize disruption and maintain appropriate documentation, chain-of- custody, and content integrity.

• Perform e-Discovery & Forensic services to support security incidents.

• Maintain an internal archival site containing references, resources, and activities for e- Discovery & Forensics.

• Collaborate with General Counsel Ethics and Administration (GCEA) to efficiently manage their e-Discovery & Forensics results workflows.

Bachelors 3 eDiscovery/Forensics

Matter Expert Level

Forensics Specialist L2s will:

• Conduct e-discovery activities to support General Counsel (GC) litigation cases and Office of Inspector General (OIG) investigations.

• Support eDiscovery and Digital Forensic investigations on all types of devices (desktops, servers, mobile devices, removal media, Cloud Contractors, etc.)

• Provide digital forensic services to support Organization’s investigations and Insider Threat program.

• Provide eDiscovery services in response to ongoing Requests for Information (RFIs) from the Office of the Chief Information Officer (CIO).

• Provided comprehensive e-Discovery services, utilizing best practices to identify, preserve, recover, collect, analyze and minimize disruption and maintain appropriate documentation, chain-of- custody, and content integrity.

• Perform e-Discovery & Forensic services to support security incidents.

• Maintain an internal archival site containing references, resources, and activities for e- Discovery & Forensics.

• Collaborate with General Counsel Ethics and Administration (GCEA) to efficiently manage their e-Discovery & Forensics results workflows.

Bachelors 5

Identity Credentialing and Access Management (ICAM) Specialist – Subject Matter Expert Level 1

• ICAM Specialist L1s will assist and support senior staff to perform complex Identity Credential and Access Management systems development and design work that may include data modelling, development cost projections, software architecture analysis and design.

• Performs complex Identity Credential and Access Management systems development and design work that may include data modelling, development cost projections, software architecture analysis and design.

• Assess, synthesize, and document customer ICAM business requirements

• Connect ICAM goals and objectives with the business mission

• Provide enterprise systems engineering guidance, systems security technical guidance, expert technical advice, technology assessments (research and proof-of-concepts), acquisition analysis (AoAs), and independent technical reviews

• As required to support the government, the Contractor shall participate in IA meetings, boards such as TRB, CCB, program management reviews, and other related meetings and provide analyses that include recommendations to enable the Government to make informed decisions

• Performs systems process and data modeling, simulation, and analysis

• Reviews completion and implementation of system additions and/or enhancements and makes recommendations to management and/or clients

• Develops documentation on new or existing systems

• Develops and directs tests to ensure systems meet documented user requirements

• Identifies, analyzes, and resolves system problems

• Provides system/ equipment/ specialized training and technical guidance

• Determines system specifications, input/output processes, and working parameters for hardware/software compatibility

Associates 3

Identity Credentialing and Access Management (ICAM) Specialist – Subject Matter Expert Level 2

• ICAM Specialist L2s will perform complex Identity Credential and Access Management systems development and design work that may include data modelling, development cost projections, software architecture analysis and design.

• Perform complex Identity Credential and Access Management systems development and design work that may include data modelling, development cost projections, software architecture analysis and design.

• Assess, synthesize, and document customer ICAM business requirements

• Connect ICAM goals and objectives with the business mission

• Provide enterprise systems engineering guidance, systems security technical guidance, expert technical advice, technology assessments (research and proof-of-concepts), acquisition analysis (AoAs), and independent technical reviews

• As required to support the government, the Contractor shall participate in IA meetings, boards such as TRB, CCB, program management reviews, and other related meetings and provide analyses that include recommendations to enable the Government to make informed decisions

• Performs systems process and data modeling, simulation, and analysis

• Reviews completion and implementation of system additions and/or enhancements and makes recommendations to management and/or clients

• Develops documentation on new or existing systems

• Develops and directs tests to ensure systems meet documented user requirements

• Identifies, analyzes, and resolves system problems

• Provides system/ equipment/ specialized training and technical guidance

• Determines system specifications, input/output processes, and working parameters for hardware/software compatibility

Associates 5

Identity Credentialing and Access Management (ICAM) Specialist – Subject Matter Expert Level 3

• ICAM Specialist L3s will provide technical guidance and work leadership to less-experienced systems engineers and may have supervisory responsibilities.

• ICAM Specialist L3s will plan and direct upgrades of software and related systems and designs systems enhancements.

• ICAM Specialist L3s will interface with client leads to provide progress reporting, and field client concerns or issues.

• Perform complex Identity Credential and Access Management systems development and design work that may include data modelling, development cost projections, software architecture analysis and design.

• Assess, synthesize, and document customer ICAM business requirements

• Connect ICAM goals and objectives with the business mission

• Provide enterprise systems engineering guidance, systems security technical guidance, expert technical advice, technology assessments (research and proof-of-concepts), acquisition analysis (AoAs), and independent technical reviews

• As required to support the government, the Contractor shall participate in IA meetings, boards such as TRB, CCB, program management reviews, and other related meetings and provide analyses that include recommendations to enable the Government to make informed decisions

• Performs systems process and data modeling, simulation, and analysis

• Reviews completion and implementation of system additions and/or enhancements and makes recommendations to management and/or clients

• Develops documentation on new or existing systems

• Develops and directs tests to ensure systems meet documented user requirements

• Identifies, analyzes, and resolves system problems

• Provides system/ equipment/ specialized training and technical guidance

• Determines system specifications, input/output processes, and working parameters for hardware/software compatibility

Security Operations Center Specialist – Subject Matter Expert Level 1

• SOC Specialist L1s will assist with the support and administration of current security systems while also monitoring logs for security events.

• SOC Specialist L1s will also work with developers, IT, and other Information Security staff as needed to resolve security events and complete projects.

Responsibilities:

• Responsible for protecting client networks, assets and resources from malware, attacks, and vulnerabilities.

• Monitor security audit and intrusion detection system logs, web application firewall logs and other security logs for system and network anomalies.

• Monitor SIEM and other tools for detection & identification of security anomalies.

• Investigate and resolve anomalies and events.

• Assist with maintaining and enhancing the current security infrastructure.

• Assist with network security evaluations and enhancements.

• Knowledge of web application assessments and penetration testing activities.

• Generate reports on assessments, incidents, and other security events.

• Identify security risks, threats and vulnerabilities of systems, applications and new technology initiatives.

• Make recommendations to better improve security within our products and network.

• Assist with security incident response as needed.

Bachelors 6

Security Operations Center Specialist – Subject Matter Expert Level 2

• SOC Specialist L2s will provide support and administration of current security systems while also monitoring logs for security events.

• SOC Specialist L2s will also work with developers, IT, and other Information Security staff as needed to resolve security events and complete projects.

Responsibilities:

• Responsible for protecting client networks, assets and resources from malware, attacks, and vulnerabilities.

• Monitor security audit and intrusion detection system logs, web application firewall logs and other security logs for system and network anomalies.

• Monitor SIEM and other tools for detection & identification of security anomalies.

• Investigate and resolve anomalies and events.

• Assist with maintaining and enhancing the current security infrastructure.

• Assist with network security evaluations and enhancements.

• Knowledge of web application assessments and penetration testing activities.

• Generate reports on assessments, incidents, and other security events.

• Identify security risks, threats and vulnerabilities of systems, applications and new technology initiatives.

• Make recommendations to better improve security within our products and network.

• Assist with security incident response as needed.

Bachelors 6

Information Assurance / Cybersecurity Specialist – Subject Matter Expert Level

• IA Specialist L1s will assist senior staff with the development of NIST / FISMA Security Assessment and Authorization (SA&A) documentation for systems and networks undergoing certification and validates the quality of deliverables produced by the team.

• Assess risks, identifies mitigation requirements, and develops accreditation recommendations

• Track SA&A requirements for assigned systems and validates that tasks are on schedule to ensure the delivery of quality documentation.

• Assist in the creation of SA&A packages with the responsibility for gathering information from system owners, applying data to the appropriate templates, and attending meetings in support of the effort.

• Perform vulnerability/risk analyses of computer systems and applications during all phases of the system development life cycle

Information Assurance / Cybersecurity Specialist – Subject Matter Expert Level

• IA Specialist L2s will develop NIST / FISMA Security Assessment and Authorization (SA&A) documentation for systems and networks undergoing certification and validates the quality of deliverables produced by the team.

• Assess risks, identifies mitigation requirements, and develops accreditation recommendations

• Track SA&A requirements for assigned systems and validates that tasks are on schedule to ensure the delivery of quality documentation.

• Assist in the creation of SA&A packages with the responsibility for gathering information from system owners, applying data to the appropriate templates, and attending meetings in support of the effort.

• Perform vulnerability/risk analyses of computer systems and applications during all phases of the system development life cycle

Bachelors 5

Information Assurance / Cybersecurity Specialist – Subject Matter Expert Level

• IA Specialist L3s will provide technical guidance and work leadership to less-experienced systems engineers and may have supervisory responsibilities.

• IA Specialist L3s will develop NIST / FISMA Security Assessment and Authorization (SA&A) documentation for systems and networks undergoing certification and validates the quality of deliverables produced by the team.

• Assess risks, identifies mitigation requirements, and develops accreditation recommendations

• Track SA&A…