Attachment 6 - PROTECTS Labor Category Descriptions.xlsx
XLSX spreadsheet 18 KB Posted
- Attached to
- DRAFT RFQ PROTECTS Federal contract opportunity
- Solicitation number
- 2032H5-24-Q-00009
About this file
This draft request for quote (RFQ) from the Department of the Treasury seeks feedback on a continuation of services for the PROviding Treasury Enterprise Cybersecurity Technology and Services (PROTECTS) contract. The RFQ includes attachments outlining the price template, performance work statement, provisions and clauses, a questions and answers template for industry feedback due by February 2, 2024, resume and labor category descriptions, examples of demonstrated corporate experience, and an ordering guide. Vendors are encouraged to provide comments and questions on the draft RFQ and attachments through the questions and answers template in the GSA eBuy system by the specified due date. The Treasury will review all industry feedback but may not provide answers to all questions received. No quotes or proposals are being accepted at this time in response to this notice.
View the file
Other files for this federal contract opportunity
| File | Type | Posted |
|---|---|---|
| Attachment 2 - PROTECTS PWS.docx | DOCX document | |
| Attachment 4 - Questions and Answers Template.xlsx | XLSX spreadsheet | |
| Attachment 1 - Price Template.xlsx | XLSX spreadsheet | |
| Attachment 1 MSS Template.docx | DOCX document | |
| Attachment 9 - Ordering Guide.docx | DOCX document | |
| Attachment 3 - PROTECTS Provisions and Contract Clauses.docx | DOCX document | |
| Attachment 8 - Mock Scenario.docx | DOCX document | |
| PROTECTS RFQ 24-Q-00009.docx | DOCX document | |
| Attachment 5 - PROTECTS Resume Template.docx | DOCX document | |
| Attachment 7 - PROTECTS Demonstrated Corporate Experience.xlsx | XLSX spreadsheet |
On GovTribe
Work with this file on GovTribe
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Sheet1
| Attachment 6 - PROviding Treasury Enterprise Cybersecurity Technology & Services (PROTECTS) Labor Category Descriptions | |||||
| Labor Categories | Key Personnel | Descriptions | Education | Years of Experience | And/Or Exception |
| Chief Cyber Security Engineer | Yes | Senior engineer who independently performs a variety of system design and integration tasks which are broad in nature and are concerned with design, implementation and architecting of major systems, systems of systems, integration of systems elements and related support systems. Develops cutting-edge solutions that display ingenuity, and are achieved through collaboration and dialogue with other experts in the field. Requires expert knowledge and mastery of highly advanced technologies, scientific principles, theories and concepts. Often supervises a broad team of engineers through project completion. Considered a Subject Matter Expert (SME) in one or more specific areas of cybersecurity, computer system design and networking. |
• CISSP certification with two years of experience or four years of experience employed in a governmental organization (as a government or contract employee) as a cybersecurity engineer.
| • Two years of experience with governmental (FedRAMP) hybrid on-premises and cloud technology stack environments, with preference given to cybersecurity engineers with transition experience moving from an on-premises to a hybrid on-premises and cloud network solution. | Bachelors | 15 | 4yrs additional experience in lieu of degree | |||
| Cyber Applications Architect | No | Specializes in application security and development in a cyber environment. Responsible for application design, development and specifications translation to design. Provides technical direction and guidance to the programming team. Ensures adherence to Federal Information Processing Standards (FIPS), DOD guidelines, Software Engineering Institute standards and commercial practices. | Bachelors | 7 | 4yrs additional experience in lieu of degree | |
| Cyber Enterprise Architect | No | Senior Architect who independently performs a variety of system design and integration tasks which are broad in nature and are concerned with design, implementation and architecting of major systems, systems of systems, integration of systems elements and related support systems. Often supervises a broad team of engineers through project completion. Is considered a Subject Matter Expert (SME) in one or more specific areas of cybersecurity, computer system design and networking. | Bachelors | 10 | 4yrs additional experience in lieu of degree | |
| Cyber Risk Management Specialist I | No | Assesses operational security posture for an information system, system component, application or program to ensure compliance with approved security policies and technical controls. Assesses cyber risk of exposure of proprietary data through weaknesses in platforms, access procedures, or forms of access to the organization’s systems and the data contained in them. Individual is proficient in applying technical principles, theories, and concepts in the assessment of information systems and information confidentiality, integrity, and availability. Recommends countermeasures to address security gaps. | Bachelors | 0 | 4yrs additional experience in lieu of degree | |
| Cyber Risk Management Specialist II | No | Assesses operational security posture for an information system, system component, application or program to ensure compliance with approved security policies and technical controls. Assesses cyber risk of exposure of proprietary data through weaknesses in platforms, access procedures, or forms of access to the organization’s systems and the data contained in them. Individual is proficient in applying technical principles, theories, and concepts in the assessment of information systems and information confidentiality, integrity, and availability. Recommends, documents, and briefs organization stakeholders on remediation options. Works with program stakeholders to execute remediation plans. | Bachelors | 4 | 4yrs additional experience in lieu of degree | |
| Cyber Risk Management Specialist III | No | Assesses operational security posture for an information system, system component, application or program to ensure compliance with approved security policies and technical controls. Assesses cyber risk of exposure of proprietary data through weaknesses in platforms, access procedures, or forms of access to the organization’s systems and the data contained in them. Individual is proficient in applying technical principles, theories, and concepts in the assessment of information systems and information confidentiality, integrity, and availability. Recommends, documents, and briefs organization stakeholders on remediation options. Works with program stakeholders to execute and track remediation plans. |
| Supports engineering design teams by assessing network and system security design features and making recommendations concerning overall security accreditation readiness, compliance, and best practices. Assists programs and organizations in determining risk and impact of systems design choices. | Bachelors | 7 | 4yrs additional experience in lieu of degree | |||
| Cyber Security Administrator II | No | Responsible for implementation and maintenance, such as platform and software patching, of operating system and related software in support of cyber related activities. Establishes and implements standards for computer operations, consistent with documented customer cyber policies, for compatibility between hardware and software, according to specifications and parameters. Monitors system resources, aids in the design, and implements backup and recovery processes, and troubleshoots system issues and outages. Schedules, performs, and monitors system backups and, when necessary, performs data recoveries. Automates processes to streamline monitoring, troubleshooting, deployment, and maintenance capabilities. | Bachelors | 3 | 4yrs additional experience in lieu of degree | |
| Cyber Security Administrator III | No | Responsible for implementation and maintenance, such as platform and software patching, of operating system and related software in support of cyber related activities. Establishes and implements standards for computer operations, consistent with documented customer cyber policies, for compatibility between hardware and software, according to specifications and parameters. Monitors system resources, aids in the design, and implements backup and recovery processes, and troubleshoots system issues and outages. Schedules, performs, and monitors system backups and, when necessary, performs data recoveries. Automates processes to streamline monitoring, troubleshooting, deployment, and maintenance capabilities. Generally considered a specialist in area of assignment. May lead individuals assisting in the work. | Bachelors | 7 | 4yrs additional experience in lieu of degree | |
| Cyber Security Engineer I | No | Develops and implements cybersecurity solutions to protect systems and networks against potential threats. Researches and pilots new cyber security technologies. Investigates cyber security solution issues. Ensures cyber security solutions are in compliance with organizational policies and guidelines. Assists with configurations, validates secure complex systems, and tests security products and systems to detect security weaknesses. | Bachelors | 0 | 4yrs additional experience in lieu of degree | |
| Cyber Security Engineer II | No | Develops and implements cybersecurity solutions to protect systems and networks against potential threats. Researches and pilots new cyber security technologies. Investigates cyber security solution issues. Ensures cyber security solutions are in compliance with organizational policies and guidelines. Assists with configurations, validates secure complex systems, and tests security products and systems to detect security weaknesses. Interfaces with stakeholders in the strategic design process to translate security and business requirements into technical designs. Develops engineering documentation. Develops mitigations in response to security incidents and evolving cyber threats. Assists with creation of cyber security standards and policies. | Bachelors | 3 | 4yrs additional experience in lieu of degree | |
| Cyber Security Engineer III | No | Develops and implements cybersecurity solutions to protect systems and networks against potential threats. Researches and pilots new cyber security technologies. Investigates cyber security solution issues. Ensures cyber security solutions are in compliance with organizational policies and guidelines. Assists with configurations, validates secure complex systems, and tests security products and systems to detect security weaknesses. Interfaces with stakeholders in the strategic design process to translate security and business requirements into technical designs. Develops engineering documentation. Develops mitigations in response to security incidents and evolving cyber threats. Develops and maintains cyber security standards and policies. Promotes cyber security awareness. | Bachelors | 7 | 4yrs additional experience in lieu of degree | |
| Cyber Security Specialist I | No | Individual contributor representing the most common entry point for technical employees; works under direct supervision. Resolves technical problems that are typically not difficult or complex. Resolves technical problems that are typically not difficult or complex. Works under supervision on less complex projects/ assignments. Develops products, solutions, processes using basic principles, theories and concepts within own technical specialty. Requires basic knowledge of and ability to apply principles, theories, and concepts of narrow technical domain. | Bachelors | 0 | 4yrs additional experience in lieu of degree | |
| Cyber Security Specialist II | No | Fully competent and productive technical individual contributor that works under limited supervision. Applies working knowledge of technical domain to develop solutions to routine technical problems which may be vague but are typically not complex. Develops solutions to technical problems that require depth of technical knowledge, but are typically limited in complexity. Requires working knowledge of and ability to apply standards, principles, theories, concepts, and techniques of technical domain. | Bachelors | 3 | 4yrs additional experience in lieu of degree | |
| Cyber Security Specialist III | No | Seasoned technical individual contributor that is fully proficient in applying technical principles, theories, and concepts in the field. Responsible for developing solutions to technical problems and issues that may be difficult and unclear. Develops technical solutions that require collaboration with internal experts, deep analyses and understanding of impact on end-product/solution. Develops solutions to technical problems and issues that are unclear and require deep technical knowledge. Requires deep understanding of and ability to apply principles, theories, and concepts of technical domain and has broad understanding of other related specialty areas. | Bachelors | 7 | 4yrs additional experience in lieu of degree | |
| Cyber Security Subject Matter Expert (SME) I | No | Seasoned technical individual contributor possessing extensive expertise in technical domain area. Responsible for developing solutions to technical issues and problems that are undefined and complex. Develops solutions to complex technical issues and problems that impact multiple area or disciplines. Regularly employs ingenuity and creativity to develop new technical solutions and systems in order to achieve functional objectives. Requires expert knowledge of and ability to apply advanced technical principles, theories, and concepts. | ||||
| Bachelors | 10 | 4yrs additional experience in lieu of degree | ||||
| Cyber Security Subject Matter Expert (SME) II | No | Individual contributor and widely recognized thought leader in technical domain area; contributes to the body of knowledge within technical domain. Develops cutting-edge solutions that display ingenuity, and are achieved through collaboration and dialogue with other experts in the field. Resolves undefined, highly complex and multi-dimensional problems that require significant technical depth, conceptualization and interpretation. Requires expert knowledge and mastery of highly advanced technologies, scientific principles, theories and concepts. Mentors and coaches junior technical staff. | Bachelors | 12 | 4yrs additional experience in lieu of degree | |
| Cyber Security Subject Matter Expert (SME) III | No | Individual contributor and widely recognized thought leader in technical domain area; | ||||
| contributes to the body of knowledge within technical domain. Develops cutting-edge solutions that display ingenuity, and are achieved through collaboration and dialogue with other experts in the field. Resolves undefined, highly complex and multi-dimensional problems that require significant technical depth, conceptualization and interpretation. Requires highest knowledge and mastery of highly advanced technologies, scientific principles, theories and concepts. Mentors and coaches junior technical staff. Viewed as the leading expert and/or resource within the field by peers within and outside the organization. | Bachelors | 15 | 4yrs additional experience in lieu of degree | |||
| Cyber Task Manager | No | Responsible for planning and overseeing diverse activities within a functional area. Leads a team which consists of experienced professionals. Involved in budget management and policy recommendations. Influences others regarding policies, practices and procedures. Accountable for planning execution of short-term goals. Apply their broad management skills and specialized functional and technical expertise to manage the day-to-day operations of cyber projects. | Bachelors | 7 | 4yrs additional experience in lieu of degree | |
| Cyber Technical Architect I | No | Conceptualizes, architects, designs, implements, and supports integrated solutions specifically related to the deployment of cyber solutions. Demonstrates specialized knowledge in cyber architecture products, applications, or technologies, and uses this knowledge to design solutions that involve integrating multiple systems and vendor products. Advises, analyzes, researches, designs, installs, and implements products or complex technology or application solutions. Possesses knowledge of the future direction and trends associated with the stated information technology, and is up to date with current threats associated with it. | Bachelors | 7 | 4yrs additional experience in lieu of degree | |
| Cyber Technical Architect II | No | Provides thought leadership related to plans for protecting information technology from cyber threats. Conceptualizes, architects, designs, implements, and supports integrated solutions specifically related to the deployment of cyber solutions. Demonstrates specialized knowledge in cyber architecture products, applications, or technologies, and uses this knowledge to design solutions that involve integrating multiple systems and vendor products. Advises, analyzes, researches, designs, installs, and implements products or complex technology or application solutions. Possesses knowledge of the future direction and trends associated with the stated information technology, and is up to date with current threats associated with it. Designs secure architecture to include the software, hardware, and communications to support the total requirements as well as provide for present and future cross- functional requirements and interfaces. | Bachelors | 10 | 4yrs additional experience in lieu of degree | |
| Functional Analyst/Specialist, Sr | No | Engineering large complex computer systems and/or networks. Applies theories and principles of science or mathematics to the design of hardware, operating systems, networks and processes to solve technical problems. Systems may involve multiple protocols and interfaces, satellite communications, digital or fiber optic networks, etc. | Bachelors | 8 | 4yrs additional experience in lieu of degree | |
| Internet/Intranet Specialist | No | Performs an enterprise-wide set of disciplines for planning, analysis, design, and construction of information systems on an enterprise-wide basis or across a major sector of the enterprise. Develops analytical and computational techniques and methodology for problem solutions. May be responsible for designing new Internet Protocol version 6 (IPv6) systems and/or planning transition from IPv4 to IPv6. May be responsible for designing inter and/or intra Cloud Computing data federation. Knowledgeable in WS-Security standards as well as Cloud Computing Security tenants. | Bachelors | 3 | 4yrs additional experience in lieu of degree | |
| Program Manager | ||||||
| (Cyber Program Manager, Sr) | Yes | Primarily manages through subordinate management and/or directly manages experienced specialists. Contributes to the development of the strategy and operational direction. Accountable for managing and communicating short and long-term direction. Establishes and implements tactical and operational plans with significant impact on the achievement of functional results. Has responsibility for communicating with diverse parties external to the organization. Requires deep management and leadership knowledge to lead cross-unit project or program teams or manage across multiple functions. |
| A Project Management Professional Certification (PMP or equivalent) plus four (4) years of experience in cybersecurity OR six (6) years of documented cybersecurity project management experience. | Bachelors | 15 | 4yrs additional experience in lieu of degree | |
| SOC Project Manager | Yes | Primarily manages a function/organization through subordinate management. Manages the strategic and operational direction of the function/organization. Requires ability to influence others to accept practices and approaches, and ability to communicate with and influence executive leadership. | ||
| • | Three years of running a SOC, with a preference for experience running a combined on-premises/cloud SOC. | |||
| • | Five years of experience in cybersecurity incident response in one or more single environments with 50,000+ endpoints, with duties that include all five portions of the National Institute of Standards and Technology (NIST) Cybersecurity Framework (Identify, Protect, Detect, Respond, and Recover). | Bachelors | 10 | 4yrs additional experience in lieu of degree |
| Splunk Engineer | No | Supports systems integration efforts involving hardware, software, operating system and communications interoperability, and maintenance of the Splunk Environment. Manages distributed deployment architecture, index clusters, and search head clusters. Provides design, development, and implementation support. Develops dashboards, reports, and complex custom queries. Creates and manages Splunk knowledge objects. Provides technical design, programming, testing, and implementation support for operating, communications, and hardware systems integration of Splunk data. Normalizes disparate data sets, integrating multiple data streams and feeds from networks and infrastructure services, into near real-time dashboards for use in analysis. Prepares specifications, code, system tests, indexers, forwarders and documentation in accordance with standards and requirements specifications. May support installation of physical and software components. |
| Bachelors | 4 | 4yrs additional experience in lieu of degree | |||
| Splunk Engineer, Sr | No | Conceptualizes, designs, implements, and maintains Splunk infrastructure solutions. Supports systems integration efforts involving hardware, software, operating system and communications interoperability, and maintenance of the Splunk Environment. Manages distributed deployment architecture, index clusters, and search head clusters. Provides design, development, and implementation support. Develops dashboards, reports, and complex custom queries. Creates and manages Splunk knowledge objects. Provides technical design, programming, testing, and implementation support for operating, communications, and hardware systems integration of Splunk data. Normalizes disparate data sets, integrating multiple data streams and feeds from networks and infrastructure services, into near real-time dashboards for use in analysis. Prepares specifications, code, system tests, indexers, forwarders and documentation in accordance with standards and requirements specifications. May support installation of physical and software components. Work closely with all relevant stakeholders to solve technical problems at the network, system, and application levels. May supervise other engineers or technicians on assigned work. | Bachelors | 8 | 4yrs additional experience in lieu of degree |
| Technical Writer | No | Writes and updates material such as reports, manuals, briefs, proposals, instruction books, catalogs, and related technical and administrative publications concerned with work methods and procedures, and installation, operation, and maintenance. | Associates | 2 | 2yrs additional experience in lieu of degree |
File details come from the government source that posted it. Updated .