MAS - Horizon Industries, LIMITED - GS35F0437M

GENERAL SERVICES ADMINISTRATION

FEDERAL SUPPLY SERVICE

AUTHORIZED FEDERAL SUPPLY SCHEDULE PRICE LIST

MULTIPLE AWARD SCHEDULE

FSC GROUP MAS

General Purpose Commercial Information Technology Equipment, Software and Services

Horizon Industries, Limited

8245 Boone Blvd. Ste. 300 Vienna, VA 22182

(TEL) 703.955.4665 (FAX) 703.242.2325

Contract Administrator: Sunil Shamlal sunil.shamlal@hil.us www.hil.us

Price List is current through Mass Mod A812, signed February 5th, 2020

Business Classification: Minority Owned Small Business

For more information on ordering from Federal Supply Schedule click on the FSS Schedules button at fss.gsa.gov. On-line access to contract ordering information, terms and conditions, up-to-date pricing, and the option to create an electronic delivery order is available through GSA Advantage!™, a menu-driven database system. The INTERNET address for GSA Advantage!™ is:

http://www.GSAAdvantage.gov.

TABLE OF CONTENTS

Customer Information

Labor Category Descriptions

Company Overview

GSA Pricing Applicable to SIN 54151HACS

GSA Pricing Applicable to 54151S

CUSTOMER INFORMATION:

SIN DESCRIPTION

54151S/ IT Professional Services 54151HACS Highly Adaptive Cybersecurity Services (HACS) OLM Order-Level Materials (OLM)

1b. Identification of the lowest priced model number and lowest unit price for that model for each special item number awarded in the contract. This price is the Government price based on a unit of one, exclusive of any quantity/dollar volume, prompt payment, or any other concession affecting price. Those contracts that have unit prices based on the geographic location of the customer, should show the range of the lowest price, and cite the areas to which the prices apply: See below

1c. Description of IT Services: See below

2. Maximum order: 54151S $500,000

3. Minimum order: $100.00

4. Geographic coverage: Domestic Delivery Only

5. Point(s) of production: Vienna, Fairfax County, Virginia

7. Quantity Discounts. 1% discount for Task Orders > $4M; Additional 2% for Task Orders > $5M

10. Foreign items (list items by country of origin). N/A

Industries.

11d. Urgent Requirements. Agencies may contact Horizon for any urgent requirement.

12. F.O.B. point. Destination

13a. Ordering address: Horizon Industries Limited, 8245 Boone Blvd., Suite 300, Vienna, VA 22182

14. Payment address(es): Horizon Industries Limited, 8245 Boone Blvd., Suite 300, Vienna, VA 22182

15. Warranty provision. N/A

16. Export packing charges, if applicable. N/A

18. Terms and conditions of rental, maintenance, and repair (if applicable). N/A

19. Terms and conditions of installation (if applicable). N/A

20a. Terms and conditions for any other services (if applicable). N/A

21. List of service and distribution points (if applicable). N/A

22. List of participating dealers (if applicable). N/A

23. Preventive maintenance (if applicable). N/A

25. Data Universal Number System (DUNS) number: 965557507

26. Notification regarding registration in System of Award (SAM) database: CAGE Code:

1UH05

Labor Category Descriptions

realize maximum benefit from an investment in IT equipment, personnel and business processes.

Provides expert guidance in analysis, strategic planning, quality management, change management, business process re-engineering and the design of information technology architectures. Conducts needs analysis, functional, technical and logical analysis, feasibility studies, cost-benefit studies, life cycle analysis, briefings and presentations, report writing and post-implementation projects.

Manages multidisciplinary projects from inception to final deliverable, involving lead computer engineers, systems analysts and computer programmers, business analysts to achieve an integrated IT solution to customer’s requirements. Organizes, directs, and coordinates planning and execution of all program/technical support activities. Simultaneously plans and manages transition of several highly technical projects. Establishes or alters (as necessary) management structure to effectively direct program/technical support activities. Meets and confers with client management regarding the status of specific program/technical activities as well as problems, issues, or conflicts requiring resolution.

Minimum/General Experience: Possesses thorough knowledge of IT processes, principles and practices involved in computer-aided technical solutions. Must have an understanding of systems analysis, cost analysis and processes relevant to planned assignments. Has a minimum of three years working experience in a technical management capacity. Has demonstrated information technology expertise and communication skills to be able to interface with all levels of management.

Minimum Education: Master’s Degree in Computer Science or Equivalent Experience.

a range of capabilities, including numerous engineering, technical, business, and records management functions. Develops plans for information systems from project inception to conclusion. Analyzes system problems, support requirements, and the information to be processed. Conducts needs analysis, functional, technical and logical analysis, feasibility studies, cost-benefit studies, life cycle analysis, briefings and presentations, report writing and post- implementation projects. Defines the problem/support needed, and develops system requirements and program specifications, from which programmers prepare detailed flow charts, programs, and tests. Coordinates closely with programmers, business process owners and software engineers to ensure implementation of program and systems specifications. Develops business process charts, performs financial modeling, and assist with change management. Provides evaluation on a technical, functional, or cost basis for system design, development, and/or maintenance. Assists with and/or performs database design and development.

Minimum/General Experience: Minimum of 2 years technical experience. Possesses vast experience in evaluating, developing and/or analyzing information systems (IS) or information technology (IT), financial analysis and business process modeling. This experience includes the use of client-server systems, distributed databases, both wide-area and local-area communications, and a performance-based acquisition process. A person in this category is expected to have knowledge of quality assurance standards, testing strategies, and certification compliance.

Minimum Education: Bachelor’s Degree Computer Science, Computer Information Systems, Business, Mathematics, or Equivalent Technical Studies/experience.

and design specifications for functional activities. Performs detailed financial and economic modeling.

Interacts with functional and technical personnel to translate detailed design into computer application software. Provides unique and/or in-depth technical or business analysis and technical/business report development support within subject-matter areas requiring leading-edge or state-of-the-art technical and business expertise. May support a wide variety of technical and business assignments based on the specific needs of the task’s requirements. Analyzes information system user needs to determine functional requirements. Performs functional allocation to identify required tasks and their interrelationships. Identifies resources and costs required for each information system development and/or maintenance task. Evaluates systems and business processes to conduct Fit- Gap or other related analysis. Prepares plans for COTS implementations including transition plans and staffing requirements.

Minimum/General Experience: Minimum of 1 year technical experience. IT/Financial specialist with working experience in finance, business analysis, systems functional analysis, quality management, database development, or data administration/standardization. Acquired skills include computer modeling and simulation. Trained in technical, cost, or business discipline specific to assignment. Working knowledge and/or familiarity with systems acquisition and RFP process.

Minimum Education: Bachelor’s Degree in Computer Science, Information Systems, Engineering, Business, or other related discipline, or Equivalent Experience in a technical or business discipline.

and logical analysis, feasibility studies, cost-benefit studies, life cycle analysis, briefings and presentations, report writing and post-implementation projects. Assists with all stages of source selection and the proposal process including the preparation of Requests for Information (RFI), Requests for Proposals (RFP) and Requests for Quotations (RFQ). Manages the data collection process and the development and maintenance of databases to support program/project management, data compilation, and the creation of final deliverables.

Minimum/General Experience: Ability to apply the disciplines of operations research to the analysis of problems. Acquired skills include computer modeling and simulation, data collection and statistical analysis, evaluation of strategies and tactics under risk scenarios, test planning and conduct, etc.

Possesses skills utilizing software for the preparation of documents, spreadsheets, flow charts/diagrams, database structures, and presentations. Has strong organizational skills, experience utilizing project management software and knowledge of the Federal Acquisition process.

Minimum Education: Bachelor’s Degree or Equivalent Experience

and writing. Must possess skills utilizing software for the preparation of documents, spreadsheets, flow charts/diagrams, database structures, and presentations. Has proven organizational skills, experience utilizing project management software and knowledge of the Federal Acquisition process.

Functional Responsibility: Gathers, analyzes, and composes technical and financial information required for project engagements. Assist with/creates presentations, user manuals, help documentation, training materials, and installation guides. Assists with the development of technology related procurements. Provides assistance in preparing proposals, Requests for Information (RFI), Requests for Proposals (RFP) and Requests for Quotations (RFQ), presentations, reports and other client deliverables/documents as appropriate.

Minimum Education: Associate Degree or Equivalent Experience

facilitation, business process data validation, application testing from a functional business area perspective, program development, unit testing of the application code from a technical perspective, work group/work session participation, and delivery of technical and business solutions. Implements data bases that are the result of business system planning and data requirement planning. Provides for systems development and data base administration groups the future business strategies as seen from a data point of view. Assists with the analysis of information system baseline and perform a “gap analysis” between the baseline, the user operational requirements and the operating capability of enterprise application product sets. Also perform business and technical designer functions, including making contribution to both the business and technical architecture components of the solution, supporting industry/functional area/business process specialists and experts, supporting architecture/product/technology specialists and experts, and review/assess enterprise solution products for accuracy and consistency. Provides work direction and guidance to other personnel;

ensures accuracy of the work of other personnel, operates under deadlines, able to work on multiple tasks.

Minimum/General Experience: Requires seven years of application team experience. May team lead or serve as a project manager, including planning tasks, assigning resources to the task, monitoring and tracking progress, and informing project management on all project activities.

Possess a thorough knowledge of IT processes, principles and practices involved in technical solutions. Has an understanding of systems analysis, cost analysis and processes relevant to planned assignments. Has demonstrated information technology expertise and communication skills to be able to interface with all levels of management.

Minimum Education: Master’s Degree in Computer Science, Computer Information Systems, Business, Mathematics, or Equivalent Technical Studies/experience.

point of contact for those projects. Manages the definition of project scope and objectives. Manages the development of detailed work plans, schedules, project estimates, resource plans including budgets, and status reports. Conducts project meetings and is responsible for project tracking and analysis. Ensures adherence to quality standards and reviews project deliverables. Manages the integration of subcontractor tasks and tracks and reviews subcontractor deliverables. Provides technical and analytical guidance to project team. Recommends and takes action to direct the analysis and solutions of problems.

Minimum/General Experience: Minimum of 7 years of experience is required, which includes all aspects of project management. Must be able to interact with all levels of client representatives. Must possess strong interpersonal skills and have strong writing abilities.

Minimum Education: Bachelor’s Degree in Computer Science, Information Systems, Engineering, Business or Equivalent Experience.

Trainer/Facilitator Functional Responsibility: Develops, directs, plans, delivers and evaluates training programs or IT facilitator activities. Provides direct instruction and training to customers on services, procedures, processes, techniques, tactics, products or skill development.

Minimum/General Experience: Minimum of 2 years relevant experience is required. Must possess strong interpersonal skills and have strong writing abilities.

Minimum Education: Bachelor’s Degree in subject-related technical or business area, or Equivalent Experience.

facilitator activities. Provides direct instruction and training to customers on services, procedures, processes, techniques, tactics, products or skill development.

Minimum/General Experience: Minimum of 9 years relevant experience is required. Must possess strong interpersonal skills and have strong writing abilities.

Minimum Education: Bachelor’s Degree in subject-related technical or business area, or Equivalent Experience.

project leader on projects of limited scope and complexity. As a consulting team member, collects, analyzes, and interprets data in one or more information technology specialties. Develops, or participates in the development of IT solutions.

Minimum/General Experience: Minimum of 5 years of experience is required, which includes all aspects of project management. Must be able to interact with all levels of client representatives. Must possess strong interpersonal skills and have strong writing abilities.

Minimum Education: Bachelor’s Degree in Computer Science, Information Systems, Engineering, Business or Equivalent Experience.

new IT solutions or significant enhancements to existing software. Works with technical staff to understand problems with IT solutions and develops specifications to resolve them. Resolves customer complaints and responds to suggestions for improvements and enhancements. Participates in the development of user manuals. May act as team leader on less complex projects. Assist in training less experienced software development staff.

Minimum/General Experience: Minimum of 3 years of experience is required. Must be able to participate as high-level technical expert.

Minimum Education: Bachelor’s Degree in Computer Science, Information Systems, Engineering or Equivalent Experience.

expertise within leading-edge or state-of-the-art technical and business areas. May support a wide variety of technical and business assignments based on the specific needs of the task’s requirements.

Minimum/General Experience: Minimum of 5 years of experience is required providing technical expertise within a specific subject area or discipline. Must possess strong interpersonal skills and have strong writing abilities.

Minimum Education: Master’s Degree in subject-related technical or business area, or Equivalent Experience.

background. Collects data in accordance with plans developed by others. Verifies and analyzes data to identify trends and relationships as well as current and potential technical and management problems. Drafts reports of findings along with related documentation.

Minimum/General Experience: Minimum of 4 years of experience is required, which includes all aspects of project management. Must be able to interact with all levels of client representatives. Must possess strong interpersonal skills and have strong writing abilities.

Minimum Education: Bachelor’s Degree in Computer Science, Information Systems, Engineering, Business or Equivalent Experience.

and design specifications for functional activities. Performs detailed financial and economic modeling.

Interacts with functional and technical personnel to translate detailed design into computer application software. Provides unique and/or in-depth technical or business analysis and technical/business report development support within subject-matter areas requiring technical and business expertise. May support a wide variety of technical and business assignments based on the specific needs of the task’s requirements. Analyzes information system user needs to determine functional requirements. Performs functional allocation to identify required tasks and their interrelationships. Identifies resources and costs required for each information system development and/or maintenance task. Evaluates systems and business processes to conduct Fit-Gap or other related analysis. Prepares plans for implementations including transition plans and staffing requirements.

Minimum/General Experience: Minimum of 3 years of technical experience. IT/Financial specialist with working experience in finance, business analysis, systems functional analysis, quality management, database development, or data administration/standardization. Acquired skills include computer modeling and simulation. Trained in technical, cost, or business discipline specific to assignment. Working knowledge and/or familiarity with systems acquisition and RFP process.

Minimum Education: Bachelor’s Degree in Computer Science, Information Systems, Engineering, Business, or other related discipline, or Equivalent Experience.

execution process by performing analyses and provide result for recommendations; identifies needs;

monitors adjustment request to determine timely processing; compiles and prepares written reports on an ad hoc basis; reports require the ability to research, analyzes, interprets data, and sustains conclusions through the extensive use of supplemental computer applications to produce the final products; reviews various report, researches to correct invalid or erroneous transaction; maintain record management program.

Business, or other related discipline, or Equivalent Experience.

enforcing compliance to IT and cyber security policies and governing procedures to reduce risk to cyber incidents and potential areas of non-compliance. Responsible for understanding and assessing technology and operational risks related to internal technology solutions and at times, might be asked to provide input to personnel on appropriate controls to address those risks.

Minimum/General Experience: Seven (7) years of relevant experience. Meets or exceeds current industry certification requirements. Experience with systems and network administration including Microsoft product environments (Windows Server, SharePoint Server, SQL Database, Project Server, Lync Server, and Exchange Server) specifically in the 2012 / 2013 versions, and Cisco environments to include perimeter routers, firewalls, IDS/IPS solutions, and network level 2/3 switch environment.

Experience with cyber compliance methodologies.

Minimum Education: Bachelor’s degree or equivalent.

vulnerability scanning and computer network defense operations for large scale enterprise networks.

Performs monthly and ad hoc vulnerability scans of unclassified and classified network subscriber enclaves. Maintain knowledge of emerging threats, vulnerabilities, and intelligence within the cyber security field to ensure subscribers are remediating against known threats. Assist subscribers with vulnerability remediation as necessary. Conduct trending and analysis of monthly results to identify high risk vulnerabilities impacting the network and ensure proper security posture from a vulnerability management standpoint. Deploy, troubleshoot, and maintain network-based vulnerability scanners at subscriber sites to ensure appropriate coverage of scanning services.

Maintain knowledge of applicable CND policies, regulations, and compliance documents specifically related to CND auditing. Prepare reports for subscribers to assess technical configurations and compliance. Generate capture as necessary of the network(s) security posture and provide to CND management for situational awareness. Document policies and procedures for the use of vulnerability assessment tools and methodologies. Test and evaluate new technologies, specifically related to network vulnerability scanning.

Minimum/General Experience: Seven (7) years of relevant experience. Meets or exceeds current industry certification requirements. Understanding of Information Assurance (IA) and Computer Network Defense (CND) concepts, practices and tools to design and administer classified and unclassified DoD computer networks and systems. Ability to communicate complex technical and programmatic information, often in the form of verbal and visual operational updates, situation reports and briefings. Computer helpdesk, Systems Administration, Network Administration, and strong customer service skills preferred. Understanding of TCP/IP networking required, experience with cyber security related tools preferred. Familiarity of Windows Server/Workstation operating systems required, familiarity of Unix/Linux preferred. Familiarity with CJCSM 6510 and DoD 8570.1 (desired). Computer Emergency Response Team (CERT) or Security Operations Center (SOC) operations (desired).

Minimum Education: Bachelor’s degree or equivalent.

(MLS) issues. Designs, develops, engineers and implements solutions to MLS requirements.

Responsible for the implementation and development of the MLS. Gathers and organizes technical information about an organization's mission goals and needs, existing security products, and ongoing programs in the MLS arena. Performs risk analyses which also includes risk assessment. Provides technical support for secure software development and integration tasks, including reviewing work products for correctness and adhering to the design concept and to user standards. Knowledgeable of Security/Information Assurance (IA) products such as PKI, VPN, firewalls, and intrusion detection systems. Analyzes and recommends resolution of security/IA problems on the basis of knowledge of the major IA products and services, an understanding of their limitations, and knowledge of the IA disciplines.

Minimum/General Experience: Two (2) years of project related experience. Meets or exceeds current industry certification requirements.

Minimum Education: Bachelor’s degree or equivalent.

incident response events on a global network. Leverages advanced tools to identify and mitigate malicious activity, ranging from malware to potential interactive intrusions. Analyzes computer systems and network traffic for signs of infection or compromise. Characterizes suspicious binaries and be able identify traits. Identify potential malicious activity from memory dumps, logs, and packet captures. Interact and assist other investigative teams on time sensitive, critical investigations.

Participates as part of a close team of technical specialists on coordinated responses and subsequent remediation of security incidents. Serves as escalation point and performs further triage on escalated incidents and events. Provides briefings to leadership. Senior Cyber Security Analyst will act as a subject matter expert on information security related issues pertaining to malware analysis and incident response.

Minimum/General Experience: Two (2) years of project related experience. Meets or exceeds current industry certification requirements.

Minimum Education: Bachelor’s degree or equivalent.

organization including determination of the criticality of an incident, appropriate containment, and mitigation activities. Prioritizes advanced computer and network forensic investigations relating to various forms of malware, computer intrusion, theft of information, denial of service, and data breaches. Oversees the execution of Cyber Security Incident Response others for minor security incidents. Establishes and maintains strong working relationships with all teams required to support incident response. Improves Incident Response processes by taking advantage of and integration with new technologies and capabilities.

Minimum/General Experience: Five (5) years of project related experience. Meets or exceeds current industry certification requirements.

Minimum Education: Bachelor’s degree or equivalent.

program. Sets policies and procedures, technical standards and methods, and priorities. Coordinates the management of all work performed on tasks under the contract. Coordinates the efforts of subcontractors, team members, and vendors. Acts as the central point of contact with the Contracting Officer, the Contracting Officer’s Representative, and other client officials. Works independently, or under the general direction of senior level company management, on all phases of performance including contract management, project/task order management, coordination of resource needs, coordination with corporate resources and management.

Minimum/General Experience: Seven (7) years of project related experience. Meets or exceeds current industry certification requirements.

Minimum Education: Bachelor’s degree or equivalent.

enterprise computer network defense capabilities from the enterprise down to the end point.

Assumes a key role in providing ongoing expertise for Client's tactical and strategic cyber Security incident response initiatives. Facilitates business enablement activities, including incident response, workflow & best practices and ensures key project milestones are achieved. Technical troubleshooting and root-cause analysis of solutions currently installed within the Client infrastructure. Assist with on-going architecture updates for diagrams, configuration guide(s), and supporting documentation when necessary. Leads the capture of relevant IT requirements and assists team leads and project managers with information assurance architecture and designs. Once deployed, maintains and tunes information assurance systems across network, data center, cloud, and at the application layer as needed. Integrates and customizes information assurance systems.

Minimum/General Experience: 4 years of project related experience. Strong command of networking and general IT, which can include OSI model, routing/switching and network security architecture, basic encryption, operating systems, Message transfer agents, Web Proxies, IDS. Meets or exceeds current industry certification requirements.

Minimum Education: Bachelor’s degree or equivalent.

unclassified cyber news feeds, signature updates, incident reports, threat briefs, and vulnerability alerts from external sources and to determine its applicability to the customer environment.

Disseminates information externally within the cyber intelligence community. Interprets and compiles the information received about emerging threats at different classification levels through data feeds from Internet security firms, Government organizations, private industry, and foreign Governments into actionable monitoring either by developing custom content or by some other means. Identifies potential threats based on enterprise utilized hardware and software and accounts for current and evolving hacking tools and methodologies available to disrupt these systems.

Participates in cybersecurity exercises. Designs, leads, or supports cybersecurity exercises and supports Blue Team/Red Team activity.

Minimum/General Experience: Two (2) years of project related experience. Meets or exceeds current industry certification requirements.

Minimum Education: Bachelor’s degree or equivalent.

protocol analysis, and debugging. Penetrates networks or computer systems to identify computer security vulnerabilities. Demonstrates a general understanding of how social engineering is used to compromise networks and end devices. Possesses proficient knowledge of multiple operating systems and hacking techniques. Possesses excellent communications skills and is comfortable speaking in public. Leads Red Teams and authors’ penetration testing Rules of Engagement. Leads teams and oversees penetration testing. Working knowledge with commercial and open source tools and experience with multiple programming languages. Experience with hardware-based and software security exploits and experience with reverse engineering and assembly language.

Experience supporting Red Teams in the Department of Defense, Homeland Security, Intelligence Community or other federal agencies.

Minimum/General Experience: Two (2) years of project related experience. Meets or exceeds current industry certification requirements.

Minimum Education: Bachelor’s degree or equivalent.

Performs "Hunt Operations" actively searching for indicators of compromise. Provides information for the indicator database and assists with signature creation and tuning to ensure proper agency cyber defenses. Works directly with system administrators to remediate systems to mitigate and/or prevent incidents of compromise. Actively work to reduce and mitigate findings from “Hunt Operations” or from other assessments and will report progress as requested by the Government.

Assists or leads digital forensics investigations. Experience maintaining chain of custody and cataloguing evidence/information related to forensics investigation. Experience in eDiscovery and possesses working knowledge of EnCase or similar forensics tools.

Minimum/General Experience: Three (3) years of project related experience. Meets or exceeds current industry certification requirements.

Minimum Education: Bachelor’s degree or equivalent.

and resolves network/operating system security issues. Administers the operations of a security infrastructure and serves as a member of a security operations team monitoring all aspects of network security. Monitor, contextualize and provide reporting on a wide variety of network data feeds that may include network logs, syslogs, firewall logs, netflow data, and IDS/IPS logs. Leveraging experience in network exploitation and defense, maintain a current knowledge of attack vectors and methodologies and apply this knowledge to identify vulnerabilities in an assigned network. Serve as Incident Lead for response actions to security incidents including but not limited to External Cyber Attacks, Security Violations, Insider Threat Behaviors, Classified Spillages and Configuration-based Threats. Represent the Security Team in collaborative efforts across multiple Operations and Maintenance Teams to ensure risk awareness, security best-practices, and to assist these teams in deploying and maintaining the network at the lowest possible risk accepted by the client. Ensures system security needs established and maintained for operations development, security requirements definition, security risk assessment, systems analysis, systems design, security test and evaluation, certification and accreditation, systems hardening, vulnerability testing and scanning, incident response, disaster recovery, and business continuity planning and provides analytical support for security policy development and analysis. Integrates new architectural features into existing infrastructures, designs cyber security architectural artifacts, provides architectural analysis of cyber security features and relates existing system to future needs and trends, embeds advanced forensic tools and techniques for attack reconstruction, provides engineering recommendations, and resolves integration and testing issues.

Minimum/General Experience: Two (2) years of project related experience. Possess one or more security related certifications, preferably GCIH or equivalent, CEH, etc. A solid foundation in networking, with a good understanding of TCP/IP and other core protocols. Experience in network, host, data and/or application security in a Windows/Unix/Linux operating environment.

Background in information security operations e.g. incident response and monitoring services.

Knowledge of network-based services and client/server applications. Experience with programming/scripting languages (e.g.Python/Perl). Experience with enterprise information security data management tools/SIEM such as ArcSight or Splunk.

Minimum Education: Bachelor’s degree or equivalent.

flaws and vulnerabilities. Perform security audits, risk analysis, network forensics and penetration testing. Perform malware analysis and reverse engineering. Develop a procedural set of responses to security problems. Establish protocols for communication within an organization during security incidents. Produce detailed incident reports and technical briefs for management, administrators and end-users. Liaison with other cyber threat analysis entities.

Minimum/General Experience: Two (2) years of project related experience. Possess one or more security related certifications, preferably GCIH or equivalent, CEH, etc. A solid foundation in networking, with a good understanding of TCP/IP and other core protocols. Experience in network, host, data and/or application security in a Windows/Unix/Linux operating environment.

Background in information security operations e.g. incident response and monitoring services.

Knowledge of network-based services and client/server applications. Experience with programming/scripting languages (e.g.Python/Perl). Experience with enterprise information security data management tools/SIEM such as ArcSight or Splunk.

Minimum Education: High School/GED

target analysis duties. Provides operations for persistent monitoring on a 24/7 basis of all designated networks, enclaves, and systems. Interprets, analyzes, and reports all events and anomalies in accordance with computer network directives, including initiating, responding, and reporting discovered events. Provides oversight of incident data flow and response, content, and remediation, and partners with other incident response centers in maintaining an understanding of threats, vulnerabilities, and exploits that could impact networks and assets. Performs real-time proactive security monitoring and reporting on various security enforcement systems, such as SIEM, anti-virus, internet content filtering/reporting, malcode prevention, firewalls, IDS & IPS, Web security, anti-spam, etc.

Minimum/General Experience: Two (2) years of related technical experience. Possess one or more security related certifications, preferably GCIH or equivalent, CEH, etc. Experience working cyber incident management, threat/network defense and troubleshooting.

Minimum Education: Bachelor’s degree or equivalent.

mitigate immediate and potential threats. Uses mitigation, preparedness, and response and recovery approaches, as needed, to maximize survival of life, preservation of property, and information security. Handle and response and forensic investigations in relation to computer security incidents and escalate when necessary as well as coordinate response to computer security incidents.

Recommend a course of action on each incident and creates, manages, and records all actions taken and serve as initial POC for Events of Interest reported both internally and externally. Establishes alarm/incident escalation process and tracks, follows-up, and resolves incidents. Initiates and maintains contact with affected parties during incident response lifecycle. Investigates potential incidents/intrusions.

Minimum/General Experience: Three (3) years of project related experience. Possess one or more security related certifications Minimum Education: Highschool/GED

Infrastructure to assess compliance with applicable Information Assurance policy. Reviews both existing and draft/proposed policy against system design documentation and identify any areas of non-compliance. Assist with and/or conduct Security Test and Evaluation and IA assessment reviews as a way of validating compliance with IA policy. Review all proposed and draft policies and provide an assessment of the impact of the proposed policy on IT and IA architecture. Develop and document standards and guides for the implementation of IA solutions including but not limited to, compliance, system security design, security testing and IA assessments. Prepare training materials to assist in the transition of procedures and policies for the Cyber Security tools to client. Create baseline environments for hosting Cyber Security tools for intrusion detection/prevention systems (IDS/IPS), log aggregation/correlation, compliance monitoring and remediation, and Host Based Security System (HBSS) and other emerging technologies (hereafter referred to as Cyber Security tools).

Minimum/General Experience: Four (4) years relevant IT experience. Possess one or more security related certifications.

Minimum Education: Highschool/GED

active defense and prevention network security monitoring functions. Perform advanced data mining, event and correlation for IDS/IPS detected incidents and work with the Security Engineers to improve the teams overall detection/prevention capabilities. Provide technical analysis of network activity; the analyst monitors and evaluates network event data, signature-based IDS events and full packet capture (PCAP) data. Triage IDS alerts; collect related data from various network analysis systems, review available open and closed source information on related threats & vulnerabilities, prepare initial summary reports. Monitor and analyze signature-based IDS alerts and associated packet (PCAP) data. Analyze network flow data for anomalies and to correlate reporting with enterprise-wide network activity. Document key event details and analytic findings in an incident management system. Perform incident correlation & escalation. Communicate and collaborate with analysts from other SOC organizations to investigate cyber events. Assess cyber indicators/observables and collaborate in the development of IDS signatures and detection mechanisms. Monitor and report on trends and activity on network sensor platforms. Provide technical assessments of cyber threats and vulnerabilities. Develop, maintain and update standard operating procedures. Provide routine status updates for ongoing projects, trouble tickets, incidents, and other related tasks. Maintain awareness of major events and trends in the cyber security landscape. Ensure that all alerts are monitored, interpreted, analyzed, and investigated. Utilize external reporting tools for threat intelligence. Monitor all security-relevant logs and alerts for signs of compromise, attack, or system misuse and policy violations. Write detailed incident reports.

Collect incident and investigation metrics and trending data, identify key trends, and provide situational awareness on these trends. Monitor all-source threat reporting.

Minimum/General Experience: Two (2) years Intrusion Detection/Intrusion Prevention (IDS/IPS) experience. Possess one or more security related certifications.

Minimum Education: Highschool/GED

security, information security systems, and/or computer security requirements. Architects, assesses, develops, engineers and implements Cybersecurity solutions. Retrieves, gathers and organizes technical information about an organization’s risks, vulnerabilities, and exposures within the existing security products, networks, applications, and programs. Develops, analyzes, and implements Cybersecurity architecture(s) as appropriate. Performs risk analysis assessments, conducts Cybersecurity governance and compliance services, develops analytical and technical reports as required. May be required to perform in one or more of the following areas: risk and vulnerability assessments; cyber hunting activities; conducting penetration testing and scanning; assessment of system security for compliance; security of computer network hardware; operating system utility/support software; disaster recovery; incident response and digital forensics; application assessment; vulnerability threat management; cloud security; contingency planning; social engineering; and the development of security policies and procedures. May be responsible for leading a team in performing these services.

Minimum/General Experience: Ten (10) years of experience. Must possess one or more security related certifications.

Minimum Education: Bachelor’s degree for equivalent.

vulnerability scanning. Configure network scans, schedule network scans to run with bandwidth use in mind, and ensure accurate vulnerability assessment results are generated and made available to appropriate personnel. Configure vulnerability assessment tools to perform vulnerability scanning on enterprise network. Troubleshoot issues arising from vulnerability scanning and serve as technical expert for vulnerability assessment tools.

Minimum/General Experience: Three (3) years providing vulnerability assessment and troubleshooting. Windows, UNIX, and Linux operating systems support experience.

Minimum Education: Bachelor’s degree for equivalent.

task of a small/simple projects individually and large projects as a team member with oversight and continual skill development.

requirements. Assists in performing risk analysis and security audit services and in developing analytical reports. May assist in performing in one or more of the following areas: Risk and Vulnerability Assessments; Cyber Hunting activities; conducting Penetration Testing and scanning;

assessment of system security for compliance of applications; security of computer network hardware; operating system utility/support software; disaster recovery; incident response and digital forensics; application assessment; vulnerability threat management; cloud security;

contingency planning; social engineering; and the development of security policies and procedures.

engineers, and implements solutions. Performs risk analysis and security audit services, developing analytical reports as required. May be required to perform in one or more of the following areas: risk and vulnerability assessments; cyber hunting activities; conducting penetration testing and scanning;

assessment of system security for compliance; security of computer network hardware; operating system utility/support software; disaster recovery; incident response and digital forensics;

application assessment; vulnerability threat management; cloud security; contingency planning;

social engineering; and the development of security policies and procedures.