Federal Supply Schedule 47QTCA24D00G2

GENERAL SERVICES ADMINISTRATION

Federal Supply Service

Authorized Federal Supply Schedule Price List

On-line access to contract ordering information, terms and conditions, up-to-date pricing, and the option to create an electronic delivery order are available through GSA Advantage!®, a menu-driven database system. The INTERNET address GSA

Advantage!® is: GSAAdvantage.gov.

Multiple Award Schedule

FSC Group: Information Technology Services FSC Class:

Contract number: 47QTCA24D00G2

Contract period: September 18, 2024 through September 17, 2029

Bespoke Corps LLC 43828 Laurel Ridge Dr.

Ashburn, VA 20147-2372 703-999-1752

FAX 703-783-0420

www.bespokecorpsllc.com

Contract Administration Jeremy Armon, President

703-999-1752 Jeremy.Armon@bespokecorps.com

Business size: Small Business, 8a Certified, Small Disadvantaged Business, Black American Owned

For more information on ordering from Federal Supply Schedules go to the GSA

Schedules page at GSA.gov.

Prices Shown Herein are Net (discount deducted) http://www.bespokecorpsllc.com/

CUSTOMER INFORMATION

1a. Table of awarded special item number(s) with appropriate cross-reference to item descriptions and awarded price(s).

SINs SIN Title 54151S Information Technology Professional Services 54151HACS Highly Adaptive Cybersecurity Services

(HACS)

OLM Order-Level Materials (OLM’s)

1b. Identification of the lowest priced model number and lowest unit price for that model for each special item number awarded in the contract. This price is the Government price based on a unit of one, exclusive of any quantity/dollar volume, prompt payment, or any other concession affecting price. Those contracts that have unit prices based on the geographic location of the customer, should show the range of the lowest price, and cite the areas to which the prices apply. See Page 4 or add Rate table

1c. If the Contractor is proposing hourly rates, a description of all corresponding commercial job titles, experience, functional responsibility and education for those types of employees or subcontractors who will perform services shall be provided. If hourly rates are not applicable, indicate “Not applicable” for this item. See Page 4 or add Labor category descriptions

2. Maximum order:

SINs Maximum Order 54151S $500,000

54151HACS $500,000

OLM $250,000

3. Minimum order: $100.00

4. Geographic coverage (delivery area). Domestic

5. Point(s) of production:

Bespoke Corps LLC 43828 Laurel Ridge Dr.

Ashburn, VA 20147-2372

6. Discount from list prices or statement of net price. Government Net

7. Quantity discounts: 1% over $150,000

8. Prompt payment terms. Information for Ordering Offices: Prompt payment terms cannot be negotiated out of the contractual agreement in exchange for other concessions: 1% Net 10; Net 30

9. Foreign items (list items by country of origin): Not Applicable

10a. Time of delivery. (Contractor insert number of days.) Contact Contractor

10b. Expedited Delivery. Items available for expedited delivery are noted in this price list. Contact Contractor

10c. Overnight and 2-day delivery. Contact Contractor

10d. Urgent Requirements. Contact Contractor

11. F.O.B. point(s). Destination

12a. Ordering address(es).

Bespoke Corps LLC 43828 Laurel Ridge Dr.

Ashburn, VA 20147-2372

12b. Ordering procedures: For supplies and services, the ordering procedures, information on Blanket Purchase Agreements (BPA’s) are found in Federal Acquisition Regulation (FAR) 8.405-3.

13. Payment address(es).

Bespoke Corps LLC 43828 Laurel Ridge Dr.

Ashburn, VA 20147-2372

14. Warranty provision. No Warranty

15. Export packing charges, if applicable. Not Applicable

16. Terms and conditions of rental, maintenance, and repair (if applicable). Not Applicable

17. Terms and conditions of installation (if applicable). Not Applicable

18a. Terms and conditions of repair parts indicating date of parts price lists and any discounts from list prices (if applicable). Not Applicable

18b. Terms and conditions for any other services (if applicable). Not Applicable

19. List of service and distribution points (if applicable). Not Applicable

20. List of participating dealers (if applicable). Not Applicable

21. Preventive maintenance (if applicable). Not Applicable

22a. Special attributes such as environmental attributes (e.g., recycled content, energy efficiency, and/or reduced pollutants). Not Applicable

22b. If applicable, indicate that Section 508 compliance information is available on Electronic and Information Technology (EIT) supplies and services and show where full details can be found (e.g.

contractor’s website or other location.) The EIT standards can be found at: www.Section508.gov/.

Not Applicable

23. Unique Entity Identifier (UEI) number. Z246LHDZ5R65

24. Notification regarding registration in System for Award Management (SAM) database.

Service Contract Labor Standards: The Service Contract Labor Standards (SCLS), formerly known as the Service Contract Act (SCA), is applicable to this contract as it applies to the entire Multiple Award Schedule (MAS) and all services provided. While no specific labor categories have been identified as being subject to SCLS/SCA due to exemptions for professional employees (FAR 22.1101,

22.1102 and 29 CRF 541.300), this contract still maintains the provisions and protections for SCLS/SCA eligible labor categories. If and / or when the contractor adds SCLS/SCA labor categories to the contract through the modification process, the contractor must inform the Contracting Officer and establish a SCLS/SCA matrix identifying the GSA labor category titles, the occupational code, SCLS/SCA labor category titles and the applicable WD number. Failure to do so may result in cancellation of the contract.

SIN Labor Category 9/18/2024

9/17/2025

9/18/2025

9/17/2026

9/18/2026

9/172027

9/18/2027

9/17/2028

9/18/2028

9/17/2029

54151S IT Program Manager $173.05 $178.24 $183.59 $189.10 $194.77

54151S IT Incident Response Analyst SME $145.69 $150.07 $154.57 $159.20 $163.98

54151S IT Mid-Incident Response Analyst $118.85 $122.42 $126.10 $129.87 $133.77

54151S IT Sr. Incident Response Analyst $130.37 $134.28 $138.31 $142.46 $146.73

54151S IT Sr. Vulnerability Management Analyst $126.53 $130.33 $134.24 $138.27 $142.42

54151S IT Mid Vulnerability Management Analyst $111.19 $114.53 $117.96 $121.50 $125.15

54151S IT Sr. Security Assessment and Authorization Analyst $126.53 $130.33 $134.24 $138.27 $142.42

54151S IT Security Engineer SME $164.87 $169.81 $174.91 $180.16 $185.56

54151S IT SR Security Engineer $138.03 $142.17 $146.43 $150.82 $155.35

54151S IT Sr. Traditional Security Analyst $118.85 $122.42 $126.10 $129.87 $133.77

54151S IT Mid Traditional Security Analyst $107.36 $110.58 $113.89 $117.31 $120.83

54151S IT Technical Security and Countermeasures SME/Practitioner $145.69 $150.07 $154.57 $159.20 $163.98

54151S IT Sr. Host-Based Security Administrator/Engineer $138.03 $142.17 $146.43 $150.82 $155.35

54151S IT Technical Security and Countermeasures Instructor $126.53 $130.33 $134.24 $138.27 $142.42

54151S IT Sr. Communications Security Manager $85.88 $88.46 $91.11 $93.84 $96.65

54151S IT Sr. Technical Security and Countermeasures Practioner $126.53 $130.33 $134.24 $138.27 $142.42

54151S IT Sr. Continuity Security Engineer $126.53 $130.33 $134.24 $138.27 $142.42

54151HACS HACS Program Manager $173.05 $178.24 $183.59 $189.10 $194.77

54151HACS HACS Incident Response Analyst SME $145.69 $150.07 $154.57 $159.20 $163.98 http://www.section508.gov/

54151HACS HACS Mid-Incident Response Analyst $118.85 $122.42 $126.10 $129.87 $133.77

54151HACS HACS Sr. Incident Response Analyst $130.37 $134.28 $138.31 $142.46 $146.73

54151HACS HACS Sr. Vulnerability Management Analyst $126.53 $130.33 $134.24 $138.27 $142.42

54151HACS HACS Mid Vulnerability Management Analyst $111.19 $114.53 $117.96 $121.50 $125.15

54151HACS HACS Sr. Security Assessment and Authorization Analyst $126.53 $130.33 $134.24 $138.27 $142.42

54151HACS HACS Security Engineer SME $164.87 $169.81 $174.91 $180.16 $185.56

54151HACS HACS Sr. Security Engineer $138.03 $142.17 $146.43 $150.82 $155.35

54151HACS HACS Sr. Traditional Security Analyst $118.85 $122.42 $126.10 $129.87 $133.77

54151HACS HACS Mid Traditional Security Analyst $107.36 $110.58 $113.89 $117.31 $120.83

54151HACS HACS Technical Security and Countermeasures SME/Practitioner $145.69 $150.07 $154.57 $159.20 $163.98

54151HACS HACS Sr. Host-Based Security Administrator/Engineer $138.03 $142.17 $146.43 $150.82 $155.35

54151HACS HACS Technical Security and Countermeasures Instructor $126.53 $130.33 $134.24 $138.27 $142.42

54151HACS HACS Sr. Communications Security Manager $85.88 $88.46 $91.11 $93.84 $96.65

54151HACS HACS Sr. Technical Security and Countermeasures Practioner $126.53 $130.33 $134.24 $138.27 $142.42

54151HACS HACS Sr. Continuity Security Engineer $126.53 $130.33 $134.24 $138.27 $142.42

Labor Category Title Labor Category Description Minimum Education

Certifications Required

Minimum Years of

Experience

Security Clearance Required

IT Program Manager

Oversees the operational planning, establishment, execution, and evaluation of a multifaceted program/project typically consisting of a set of closely related subprograms or associated activities. Oversees cost, schedule, performance and risk of the program. Seeks and develops outside funding sources, serves as principal point of representation and liaison with external constituencies on operational matters, and provides day-to-day technical/professional guidance and leadership as appropriate to the area of expertise.

Bachelors PMP 12 Yes

IT Incident Response Analyst

SME

Leads security event monitoring and correlation within a tiered Security Operations Center (SOC). Leverages cybersecurity service provider (CSSP) analyst toolsets to identify, detect and respond to cybersecurity incidents.

Implements standard procedures for incident response interfacing. Conducts research and document threats and their behavior to include monitoring external CSIRTS/CERTs. Provides recommendations to threat mitigation strategies. Employs effective web, email, and telephonic communications to clearly manage security incident response procedures. Performs routine event reporting over time including trend reporting and analysis.

Experience required in security or network technology (Unix/Windows OS, Cisco/Juniper Routing-Switching) within a hands-on design/Implementation/Administration role.

Demonstrates in-depth knowledge of TCP-IP protocol implementations for all common network services in addition to demonstrated capability to perform network packet analysis and anomaly detection.

Bachelors CISSP or Equivalent 10 Yes

IT Mid-Incident Response Analyst

Under supervision from a more experience Incident Responder, participates in security event monitoring and correlation within a tiered Security Operations Center.

Leverages CSSP analyst toolsets to detect and respond to IT security incidents. Conducts research and document threats and their behavior to include monitoring external CSSPs. Assist in providing recommendations to threat mitigation strategies. Employ effective web, email, and telephonic communications to clearly manage security incident response procedures. Perform routine event reporting over time including trend reporting and analysis.

Experience required in security or network technology (Unix/Windows OS, Cisco/Juniper Routing-Switching) within a hands-on Implementation or Administration role.

Demonstrates thorough knowledge of TCP-IP protocol implementations for all common network services in addition to demonstrated capability to perform network packet analysis and anomaly detection.

Associates Security+ or Equivalent 8 Yes

IT Sr. Incident Response Analyst

Leads security event monitoring and correlation within a tiered Security Operations Center. Leverages CSSP analyst toolsets to identify, detect and respond to cybersecurity incidents. Implements standard procedures for incident response interfacing. Conducts research and document threats and their behavior to include monitoring external CSIRTS/CERTs. Provides recommendations to threat mitigation strategies. Employs effective web, email, and telephonic communications to clearly manage security incident response procedures. Performs routine event reporting over time including trend reporting and analysis.

Experience required in security or network technology (Unix/Windows OS, Cisco/Juniper Routing-Switching) within a hands-on design/Implementation/Administration role.

Demonstrates in-depth knowledge of TCP-IP protocol implementations for all common network services in addition to demonstrated capability to perform network packet analysis and anomaly detection.

Bachelors GCIH, CISSP or Equivalent 8 Yes

IT Sr. Vulnerability Management Analyst

Leads continuous monitoring assessments, penetration testing, and directed analysis. Performs manual and automated vulnerability assessment of networked infrastructure and end-points and deliver cybersecurity-focused recommendations to mitigate identified vulnerabilities. Using risk management principles, partners with the system managers to recommend proactive measures to protect the networks and counter known threats. Interfaces with upstream service providers to report the security posture and respond to directed orders.

Bachelors Certified Ethical

Hacker or Equivalent

8 Yes

IT Mid Vulnerability Management Analyst

Under direction and guidance, supports supports continuous monitoring assessments, penetration testing, and directed analysis. Performs manual and automated vulnerability assessment of networked infrastructure and end-points and deliver cybersecurity-focused recommendations to mitigate identified vulnerabilities.

Using risk management principles, partners with the system managers to recommend proactive measures to protect the networks and counter known threats. Interfaces with upstream service providers to report the security posture and respond to directed orders.

Associates Security + 5 Yes

IT Sr. Security Assessment and Authorization Analyst

Performs and leads support of Security Assessment and Authorization (SA&A) or other Risk Management Framework (RMF) Compliance and Auditing processes and inspections for all enterprise systems and networks;

ensures validity and accuracy review of all associated documentation. Leads and performs compliance reviews of computer security plans, performs risk assessments, and validates and performs security test evaluations and audits.

Analyzes and defines security requirements for information protection for enterprise systems and networks. Assists in the development of security policies. Analyzes the sensitivity of information and performs vulnerability and risk assessments on the basis of defined sensitivity and information flow.

Bachelors CISM, CISSP or Equivalent 8 Yes

IT Security Engineer SME

Performs high-level systems security analysis, evaluation, design, integration, engineering, documentation, and implementation of very complex application that require a thorough knowledge of administrative, and technical skills.

Directs and participates in all phases of system development with emphasis on planning, analysis, evaluation, integration, testing and acceptance phases.

Applies higher-level business or technical principles and methods to very difficult technical problems to arrive at automated engineering solution. Designs and prepares technical reports and related documentation, and makes charts and graphs to record results. Prepare and deliver presentations and briefings

Masters CISSP or Equivalent 10 Yes

IT SR Security Engineer

Under general supervision, performs high-level systems analysis, evaluation, design, integration, documentation, and implementation of very complex application that require a thorough knowledge of administrative and technical skills. Directs and participates in all phases of system development with emphasis on planning, analysis, evaluation, integration, testing and acceptance phases (IV&V and DT&E). Applies higher-level business or technical principles and methods to very difficult technical problems to arrive at automated engineering solution.

Bachelors CISSP or Equivalent 8 Yes

IT Sr. Traditional Security Analyst

Manages the day-to-day operations of a personnel and physical security program. Demonstrates a comprehensive understanding of the applicable laws, rules, and regulations relating to personnel and traditional security, and developments occurring in the security community.

Minimally is versed in the NISPOM. Demonstrates knowledge of traditional security (i.e., personnel and facility security) concepts, principles, and practices sufficient to perform inspections and surveys, assess critical personnel qualifications, implement and manage insider threat and counter data exfiltration methods and tools, and other issues influencing courses of action taken in resolving security questions and issues. Is knowledgeable in current security equipment, devices, intrusion detection systems (physical), electronic communication protective systems, policies and directives, lock and key systems, to plan and control personnel movement and ensure all requirements are met or exceeded.

Associates None 8 Yes

IT Mid Traditional Security Analyst

Under director supervision, demonstrates knowledge of traditional security (i.e., personnel and facility security) concepts, principles, and practices sufficient to perform inspections and surveys, assess critical personnel qualifications, access and entry restrictions, and other issues influencing courses of action taken in resolving security questions and issues. Is knowledgeable in current security equipment, devices, intrusion detection systems (physical), electronic communication protective systems, policies and directives, lock and key systems, to plan and control personnel movement and ensure all requirements are met or exceeded.

Associates None 5 Yes

IT Technical Security and Countermeasures SME/Practitioner

Possesses comprehensive knowledge of the electromagnetic spectrum and electronics fundamentals theory and effectively instructs the foundational aspects and principles of TSCM. Proficient in DoDI 5240.05, and demonstrates knowledge of TSCM concepts, principles, and practices sufficient to independently plan and perform risk analysis, inspections, and surveys. Possess strong management, multi-tasking, verbal and writing communications skills, and summarizes complex technical information into a digestive format for personnel new to the career field, and senior leader consumption.

Bachelors

TSCM

Fundamentals Course Graduation

10 Yes

IT Sr. Host-Based Security Administrator/Engineer

Manage enterprise-wide host policies and assure their continued compliance with overarching policy and tasking orders. Administers and deploys host/end-point security solutions in an enterprise environment, establishing the capability to push and pull host/end-point data to/from external organizations, configuring automated reporting/alert. Develops and delivers detailed risk reports and trends regarding host/end-point-based activity in an executive summary format, and testing/assessing implemented enterprise policy and other security controls to assure the effectiveness of the host/end-point security implementation.

Bachelors Endpoint Security Solutions 301 8 Yes

IT Technical Security and Countermeasures Instructor

Possesses knowledge and experience of conducting a TSCM investigation as prescribed by the Interagency Training Center (ITC) and U.S. national policy. Is proficient in DoDI 5240.05, all National Level TSCM Policies and Procedures, and demonstrate expert knowledge of TSCM concepts, principles, and practices sufficient to instruct varied courses of the TSCM Fundamentals course. Delivers instruction to TSCM students in a classroom setting on the tools and techniques necessary to perform basic TSCM operations;

supporting ITC training and exercises; and supporting TSCM activities tasked by the TSCM Program Manager. Possess strong management, multi-tasking, verbal and writing communications skills, and summarizes complex technical information into a digestive format for senior leader and VIP consumption

Bachelors

TSCM

Fundamentals Course Graduation

10 Yes

IT Sr. Communications Security Manager

Serve as the Communications Security (COMSEC) manager for all cryptographic activities including managing the Cryptographic Access Program (CAP). Demonstrates in-depth knowledge of COMSEC principles, directives, procedures, criteria, and systems application to coordinate COMSEC requirements. Formulates and develops communications security criteria and requirements for inclusion in mobility, contingency, and exercise plans. Maintains accountability, oversee issuance, and properly disposing of sensitive cryptographic materials, equipment, and related COMSEC information

Associates Key Management Infrastructure 5 Yes

IT Sr. Technical Security and Countermeasures Practioner

Posesses comprehensive knowledge of the electromagnetic spectrum and electronics fundamentals theory and effectively instructs the foundational aspects and principles of TSCM. Proficient in DoDI 5240.05, and demonstrates knowledge of TSCM concepts, principles, and practices sufficient to independently plan and perform risk analysis, inspections, and surveys.Possess strong management, multi-tasking, verbal and writing communications skills, and summarizes complex technical information into a digestive format for personnel new to the career field, and senior leader consumption.

Associates

TSCM

Fundamentals Course Graduation

8 Yes

IT Sr. Continuity Security Engineer

Under general direction, responsible for all activities relating to information assurance procedures, systems, and their mission-enablement through mission essential functions. Confers with and advises peers and customers on engineering policies and procedures and resolving technical problems, priorities, and methods. Prepares activity and progress reports relating to cybersecurity and mission assurance. Responsible for preparing contingency plans for system software, hardware, and applications for the organization. Implements procedures to ensure business applications continue to function through disruptive incidents within an organization. Develops and maintains various security controls to protect technology assets from internal or inadvertent modification, disclosure or destruction.

Bachelors Security + or Equivalent 8 Yes

HACS Program Manager

Oversees the operational planning, establishment, execution, and evaluation of a multifaceted cybersecurity program/project typically consisting of a set of closely related subprograms or associated activities. Oversees cost, schedule, performance and risk of the program. Seeks and develops outside funding sources, serves as principal point of representation and liaison with external constituencies on operational matters, and provides day-to-day technical/professional guidance and leadership as appropriate to the area of expertise.

Bachelors PMP 12 Yes

HACS Incident Response Analyst SME

Leads cybersecurity event monitoring and correlation within a tiered Security Operations Center (SOC). Leverages cybersecurity service provider (CSSP) analyst toolsets to identify, detect and respond to cybersecurity incidents.

Implements standard procedures for incident response interfacing. Conducts research and document threats and their behavior to include monitoring external CSIRTS/CERTs. Provides recommendations to threat mitigation strategies. Employs effective web, email, and telephonic communications to clearly manage security incident response procedures. Performs routine event reporting over time including trend reporting and analysis.

Experience required in security or network technology (Unix/Windows OS, Cisco/Juniper Routing-Switching) within a hands-on design/Implementation/Administration role.

Demonstrates in-depth knowledge of TCP-IP protocol implementations for all common network services in addition to demonstrated capability to perform network packet analysis and anomaly detection.

Bachelors CISSP or Equivalent 10 Yes

HACS Mid-Incident Response Analyst

Under supervision from a more experienced Incident Responder, participates in cybersecurity event monitoring and correlation within a tiered Security Operations Center.

Leverages CSSP analyst toolsets to detect and respond to IT security incidents. Conducts research and document threats and their behavior to include monitoring external CSSPs. Assist in providing recommendations to threat mitigation strategies. Employ effective web, email, and telephonic communications to clearly manage security incident response procedures. Perform routine event reporting over time including trend reporting and analysis.

Experience required in security or network technology (Unix/Windows OS, Cisco/Juniper Routing-Switching) within a hands-on Implementation or Administration role.

Demonstrates thorough knowledge of TCP-IP protocol implementations for all common network services in addition to demonstrated capability to perform network packet analysis and anomaly detection.

Associates Security+ or Equivalent 8 Yes

HACS Sr. Incident Response Analyst

Leads cybersecurity event monitoring and correlation within a tiered Security Operations Center. Leverages CSSP analyst toolsets to identify, detect and respond to cybersecurity incidents. Implements standard procedures for incident response interfacing. Conducts research and document threats and their behavior to include monitoring external CSIRTS/CERTs. Provides recommendations to threat mitigation strategies. Employs effective web, email, and telephonic communications to clearly manage security incident response procedures. Performs routine event reporting over time including trend reporting and analysis.

Experience required in security or network technology (Unix/Windows OS, Cisco/Juniper Routing-Switching) within a hands-on design/Implementation/Administration role.

Demonstrates in-depth knowledge of TCP-IP protocol implementations for all common network services in addition to demonstrated capability to perform network packet analysis and anomaly detection.

Bachelors GCIH, CISSP or

HACS Sr. Vulnerability Management Analyst

Leads cybersecurity continuous monitoring assessments, penetration testing, and directed analysis. Leveragting authorized methods and tools, performs manual and automated cybersecurity vulnerability assessment of networked infrastructure and end-points and deliver cybersecurity-focused recommendations to mitigate identified vulnerabilities. Using risk management principles, partners with the system managers to recommend proactive measures to protect the networks and counter known threats. Interfaces with upstream service providers to report the security posture and respond to directed orders.

Bachelors Certified Ethical

Hacker or Equivalent

8 Yes

HACS Mid Vulnerability Management Analyst

Under direction and guidance of a higher-level manager, supports supports cybersecurity continuous monitoring assessments, penetration testing, and directed analysis.

Leveraging authorized methods and tools, performs manual and automated cybersecurity vulnerability assessment of networked infrastructure and end-points and deliver cybersecurity-focused recommendations to mitigate identified vulnerabilities. Using risk management principles, partners with the system managers to recommend proactive measures to protect the networks and counter known threats. Interfaces with upstream service providers to report the security posture and respond to directed orders.

Associates Security + 5 Yes

HACS Sr. Security Assessment and Authorization Analyst

Performs and leads support of cybersecurity Security Assessment and Authorization (SA&A) or other Risk Management Framework (RMF) Compliance and Auditing processes and inspections for all enterprise systems and networks; ensures validity and accuracy review of all associated documentation. Leads and performs compliance reviews of computer security plans, performs risk assessments, and validates and performs security test evaluations and audits. Analyzes and defines security requirements for information protection for enterprise systems and networks. Assists in the development of security policies. Analyzes the sensitivity of information and performs vulnerability and risk assessments on the basis of defined sensitivity and information flow. Directly interfaces with authorized cybersecurity compliance platforms to document and manage compliance over time.

Bachelors CISM, CISSP or Equivalent 8 Yes

HACS Security Engineer SME

Performs high-level systems cybersecurity analysis, evaluation, design, integration, engineering, documentation, and implementation of very complex application that require a thorough knowledge of administrative, and technical skills. Directs and participates in all phases of system development with emphasis on planning, analysis, evaluation, integration, testing and acceptance phases. Applies higher-level business or technical principles and methods to very difficult technical problems to arrive at automated engineering solution.

Designs and prepares technical reports and related documentation, and makes charts and graphs to record results. Prepares and delivers presentations and briefings

Masters CISSP or Equivalent 10 Yes

HACS Sr. Security Engineer

Under general supervision, performs high-level cybersecurity systems analysis, evaluation, design, integration, documentation, and implementation of very complex application that require a thorough knowledge of administrative and technical skills. Directs and participates in all phases of system development with emphasis on planning, analysis, evaluation, integration, testing and acceptance phases (IV&V and DT&E). Applies higher-level business or technical principles and methods to very difficult technical problems to arrive at automated cybersecurity-based engineering solution.

Bachelors CISSP or Equivalent 8 Yes

HACS Sr. Traditional Security Analyst

Manages the day-to-day operations of a cybersecurity and personnel and physical security program. Demonstrates a comprehensive understanding of the applicable laws, rules, and regulations relating to personnel and traditional security, and developments occurring in the security community. Minimally is versed in the NISPOM.

Demonstrates knowledge of traditional security (i.e., personnel and facility security) concepts, principles, and practices sufficient to perform inspections and surveys, assess critical personnel qualifications, implement and manage insider threat and counter data exfiltration methods and tools, and other issues influencing courses of action taken in resolving security questions and issues. Is knowledgeable in current security equipment, devices, intrusion detection systems (physical), electronic communication protective systems, policies and directives, lock and key systems, to plan and control personnel movement and ensure all requirements are met or exceeded.

Associates None 8 Yes

HACS Mid Traditional Security Analyst

Under direct supervision of a higher-level manager, demonstrates knowledge of traditional security (i.e., personnel and facility security) concepts, principles, and practices sufficient to perform inspections and surveys, assess critical personnel qualifications, access and entry restrictions, and other issues influencing courses of action taken in resolving security questions and issues. Is knowledgeable in current security and cybersecurity equipment, devices, intrusion detection and preventions systems, electronic communication protective systems, policies and directives, lock and key systems, to plan and control personnel movement and ensure all requirements are met or exceeded.

Associates None 5 Yes

HACS Technical Security and Countermeasures SME/Practitioner

Possesses comprehensive knowledge of the electromagnetic spectrum and electronics fundamentals theory and effectively instructs the foundational aspects and principles of TSCM. Proficient in DoDI 5240.05, and demonstrates knowledge of TSCM concepts, principles, and practices sufficient to independently plan and perform risk analysis, inspections, and surveys. Possess strong management, multi-tasking, verbal and writing communications skills, and summarizes complex technical information into a digestive format for personnel new to the career field, and senior leader consumption.

Demonstrates the relationship between technical security and cybersecurity and recommends methods of integration.

Bachelors

TSCM

Fundamentals Course Graduation

10 Yes

HACS Sr. Host-Based Security Administrator/Engineer

Manage enterprise-wide host/end-point cybersecurity policies and assure their continued compliance with overarching policy and tasking orders. Demonstrated experience administering and deploying host/end-point cybersecurity solutions in an enterprise environment, establishing the capability to push and pull host/end-point data to/from external organizations, configuring automated reporting/alerts, providing detailed reports and trends regarding host/end-point-based activity in an executive summary format, and testing/assessing implemented enterprise policy and other security controls to assure the effectiveness of the host/end-point cybersecurity implementation.

Bachelors Endpoint Security Solutions 301 8 Yes

HACS Technical Security and Countermeasures Instructor

Possesses knowledge and experience of conducting a TSCM investigation as prescribed by the Interagency Training Center (ITC) and U.S. national policy. Is proficient in DoDI 5240.05, all National Level TSCM Policies and Procedures, and demonstrate expert knowledge of TSCM concepts, principles, and practices sufficient to instruct varied courses of the TSCM Fundamentals course. Delivers instruction to TSCM students in a classroom setting on the tools and techniques necessary to perform basic TSCM operations;

supporting ITC training and exercises; and supporting TSCM activities tasked by the TSCM Program Manager.

Understands cybersecurity and how cybersecurity may be integrated with technical security for a broader risk management approach. Possess strong management, multi-tasking, verbal and writing communications skills, and summarizes complex technical information into a digestive format for senior leader and VIP consumption

Bachelors

TSCM

Fundamentals Course Graduation

10 Yes

HACS Sr. Communications Security Manager

Serve as the Communications Security (COMSEC) manager for all cryptographic activities including managing the Cryptographic Access Program (CAP). Demonstrates in-depth knowledge of COMSEC principles, encryption methods, directives, procedures, criteria, and systems application to coordinate COMSEC requirements.

Formulates and develops communications security and criteria and requirements for inclusion in mobility, contingency, and exercise plans. Maintains accountability, oversee issuance, and properly disposing of sensitive cryptographic materials, equipment, and related COMSEC information and encryption devices.

Associates Key Management Infrastructure 5 Yes

HACS Sr. Technical Security and Countermeasures Practioner

Possesses comprehensive knowledge of the electromagnetic spectrum and electronics fundamentals theory and effectively instructs the foundational aspects and principles of TSCM. Leads inspections and provides direction to direct report practitioners and/or technicians on effective and efficient technical security methods to reduce risk to a specified location or platform. Proficient in DoDI 5240.05, and demonstrates knowledge of TSCM concepts, principles, and practices sufficient to independently plan and perform risk analysis, inspections, and surveys. Understands cybersecurity and how cybersecurity may be integrated with technical security for a broader risk management approach. Possess strong management, multi-tasking, verbal and writing communications skills, and summarizes complex technical information into a digestive format for personnel new to the career field, and senior leader consumption. Develops information papers and other reporting regarding technical risk reduction to ongoing operations, and fixed and mobile platforms.

Associates

TSCM

Fundamentals Course Graduation

8 Yes

HACS Sr. Continuity Security Engineer

Under general direction, responsible for all activities relating to cybersecurity procedures, systems, and their mission-enablement through mission essential functions.

Confers with and advises peers and customers on engineering policies and procedures and resolving technical cybersecurity problems, priorities, and methods. Prepares activity and progress reports relating to cybersecurity and mission assurance. Responsible for preparing cybersecurity-based contingency plans for system software, hardware, and applications for the organization. Implements procedures and cyber-based technical solutions to ensure business applications continue to function through disruptive incidents within an organization. Develops and maintains various cybersecurity controls to protect technology assets from internal or inadvertent modification, disclosure or destruction.

Bachelors Security + or