MAS - Punch Cyber Corp - GS35F323DA

GENERAL SERVICES ADMINISTRATION

Federal Acquisition Service

Authorized Federal Supply Schedule FSS Price List

On-line access to contract ordering information, terms and conditions, up-to-date pricing, and the option to create an electronic delivery order are available through GSA Advantage!®, a menu-driven database system. The INTERNET address GSA Advantage!® is: GSAAdvantage.gov.

Multiple Award Schedule

FSC Group: Information Technology FSC Class:

Contract number: GS-35F-323DA

For more information on ordering go to the following website: http://www.gsa.gov/schedules.

Contract period: May 25, 2021 – May 24, 2026

Punch Cyber Corp

11150 SUNSET HILLS RD

Reston, VA 20190 Office | 202-905-2601 https://punchcyber.com/

Contract Administrator:

Chris McIlroy chris@punchcyber.com Phone: 202-905-2601

Business size: Small Business

Price list current as of Modification #: PS-0023; Effective 6/25/2024

CUSTOMER INFORMATION

1a. Table of awarded special item number(s) with appropriate cross-reference to item descriptions and awarded price(s).

1b. Identification of the lowest priced model number and lowest unit price for that model for each special item number awarded in the contract. This price is the Government price based on a unit of one, exclusive of any quantity/dollar volume, prompt payment, or any other concession affecting price. Those contracts that have unit prices based on the geographic location of the customer, should show the range of the lowest price, and cite the areas to which the prices apply. See Page 4

1c. If the Contractor is proposing hourly rates, a description of all corresponding commercial job titles, experience, functional responsibility and education for those types of employees or subcontractors who will perform services shall be provided. If hourly rates are not applicable, indicate “Not applicable” for this item. See Page 5

2. Maximum order: $500,000

3. Minimum order: $100

4. Geographic coverage (delivery area): Domestic and Overseas

5. Point(s) of production (city, county, and State or foreign country). N/A

6. Discount from list prices or statement of net price. Government Net Prices (discounts already deducted.)

7. Quantity discounts: None

8. Prompt payment terms. Information for Ordering Offices: Prompt payment terms cannot be negotiated out of the contractual agreement in exchange for other concessions: NET 30

9. Foreign items (list items by country of origin). Not Applicable

10a. Time of delivery. (Contractor insert number of days.) Contact Contractor

10b. Expedited Delivery. Items available for expedited delivery are noted in this price list. Contact Contractor

10c. Overnight and 2-day delivery. Contact Contractor

10d. Urgent Requirements. Contact Contractor

11. F.O.B. point(s). Destination

12a. Ordering address(es).

Punch Cyber Corp

11150 SUNSET HILLS RD

Reston, VA 20190

12b. Ordering procedures: For supplies and services, the ordering procedures, information on Blanket Purchase Agreements (BPA’s) are found in Federal Acquisition Regulation (FAR) 8.405-3.

13. Payment address(es).

Punch Cyber Corp

11150 SUNSET HILLS RD

Reston, VA 20190

14. Warranty provision. Standard Commercial Warranty Terms & Conditions

15. Export packing charges, if applicable. Not Applicable

16. Terms and conditions of rental, maintenance, and repair (if applicable). Not Applicable

17. Terms and conditions of installation (if applicable). Not Applicable

18a. Terms and conditions of repair parts indicating date of parts price lists and any discounts from list prices (if applicable). Not Applicable

18b. Terms and conditions for any other services (if applicable). Not Applicable

19. List of service and distribution points (if applicable). Not Applicable

20. List of participating dealers (if applicable). Not Applicable

21. Preventive maintenance (if applicable). Not Applicable

22a. Special attributes such as environmental attributes (e.g., recycled content, energy efficiency, and/or reduced pollutants). Not Applicable

22b. If applicable, indicate that Section 508 compliance information is available for the information and communication technology (ICT) products and services and show where full details can be found (e.g. contractor’s website or other location). ICT accessibility standards can be found at: http://www.Section508.gov/. – N/A

23. Unique Entity Identifier (UEI): H95DHH2NJ473

24. Notification regarding registration in System for Award Management (SAM) database. Contractor registered and active in SAM

LABOR CATEGORY RATES

(All rates below include IFF)

LABOR CATEGORY DESCRIPTIONS (54151HACS)

Program Manager (Cyber)

· Functional Responsibilities: Offers functional expertise and insights gained from on-the-job experience related to Cyber Programs. Manages or supports resource investments and allocations related to Cyber initiatives. Advises and leads Cyber Related strategic priorities and initiatives. Manages client and contract relationships. Manages projects in scope, schedule, and budget related to Cyber work.

· Minimum Years of Experience: Ten (10) years of experience

· Minimum Educational/Degree Requirements: Bachelor’s degree

· Substitution of Experience for Education: Twelve (12) years of total experience satisfies the minimum educational/degree requirement of a bachelor’s degree

· Substitution of Education for Experience: Each year of completed master’s degree-level coursework equates to one (1) year of experience; each year of completed PhD coursework equates to one (1) year of experience

Project Manager (Cyber)

· Functional Responsibilities: Offers functional expertise and insights gained from on-the-job experience related to Cyber Projects. Manages or supports resource investments and allocations related to Cyber initiatives. Advises and leads Cyber related strategic priorities and initiatives. Manages client and contract relationships. Manages projects in scope, schedule, and budget related to Cyber work.

· Minimum Years of Experience: Eight (6) years of experience

· Minimum Educational/Degree Requirements: Bachelor’s degree

· Substitution of Experience for Education: Eight (8) years of total experience satisfies the minimum educational/degree requirement of a bachelor’s degree

· Substitution of Education for Experience: Each year of completed master’s degree-level coursework equates to one (1) year of experience; each year of completed PhD coursework equates to one (1) year of experience

Advanced Cyber Threat Analyst II (Cyber)

· Functional Responsibilities: Performs advanced analysis of adversary tradecraft, malicious code, and capabilities related to Cyber programs. Provides cyber threat and intelligence analysis, and develops briefings and reports to distribute and aid in information sharing and protection efforts. Develops and maintains subject matter expertise of Advanced Persistent Threats and assists with Incident Response efforts.

· Minimum Years of Experience: Minimum of six (6) years Information Technology experience; minimum four (4) years advanced Cyber Threat Information experience.

· Minimum Educational/Degree Requirements: Bachelor’s degree in Information Technology or Business -OR- Associate’s degree and two (2) years relevant experience with professional certification, such as CISSP or GREM or GCIH -OR- four (4) years relevant experience with professional certification, such as CISSP or GREM or GCIH.

· Substitution of Experience for Education: Seven (7) years of total experience satisfies the minimum educational/degree requirement of a bachelor’s degree

· Substitution of Education for Experience: Each year of completed master’s degree-level coursework equates to one (1) year of experience; each year of completed PhD coursework equates to one (1) year of experience

Advanced Cyber Threat Analyst I (Cyber)

· Functional Responsibilities: Performs advanced analysis of adversary tradecraft, malicious code, and capabilities related to Cyber programs. Provides cyber threat and intelligence analysis, and develops briefings and reports to distribute and aid in information sharing and protection efforts. Develops and maintains subject matter expertise of Advanced Persistent Threats and assists with Incident Response efforts.

· Minimum Years of Experience: Minimum of two (2) years Information Technology experience; minimum of two (2) years advanced Cyber Threat Information experience.

· Minimum Educational/Degree Requirements: Bachelor’s degree

· Substitution of Experience for Education: Four (4) years of total experience can be used to substitute for minimum educational/degree requirement of a bachelor’s degree Cyber Security Engineer III (Cyber)

· Functional Responsibilities: Performs administration and engineering tasks for Cyber Security tools including, but not limited to: firewalls, Host and Network Intrusion Detection/Prevention, SIEM tools, and Anti-Malware solutions. Performs research on new features, versions, and vendor bug fixes to ensure all tools and solutions function in a reliable and secure fashion on all related Cyber Programs. Directs security engineering projects and leads team of security engineers. Oversees troubleshooting of client security tools and solutions, and advises clients of impacts to their risk. Oversees tuning and configuration changes in coordination with change management and analyst stakeholders.

· Minimum Years of Experience: Ten (10) years of experience

· Minimum Educational/Degree Requirements: Bachelor’s degree

· Substitution of Experience for Education: Ten (12) years of total experience satisfies the minimum educational/degree requirement of a Master’s degree

· Substitution of Education for Experience: Each year of completed master’s degree-level coursework equates to one (1) year of experience; each year of completed PhD coursework equates to one (1) year of experience Cyber Security Engineer II (Cyber)

· Functional Responsibilities: Performs administration and engineering tasks for Cyber Security tools including, but not limited to: firewalls, Host and Network Intrusion Detection/Prevention, SIEM tools, and Anti-Malware solutions. Performs research on new features, versions, and vendor bug fixes to ensure all tools and solutions function in a reliable and secure fashion on all related Cyber Programs. Works on security engineering projects under direction of senior engineers. Performs troubleshooting of client security tools and solutions, and escalates issues to senior engineers as needed. Performs tuning and configuration changes in coordination with change management and analyst stakeholders.

· Minimum Years of Experience: Seven (7) years of experience

· Minimum Educational/Degree Requirements: Bachelor’s degree

· Substitution of Experience for Education: Nine (9) years of total experience satisfies the minimum educational/degree requirement of a bachelor’s degree

· Substitution of Education for Experience: Each year of completed master’s degree-level coursework equates to one (1) year of experience; each year of completed PhD coursework equates to one (1) year of experience Cyber Security Engineer I (Cyber)

· Functional Responsibilities: Assists in administration and engineering tasks for Cyber Security tools including, but not limited to: firewalls, Host and Network Intrusion Detection/Prevention, SIEM tools, and Anti-Malware solutions. Assists in research on new features, versions, and vendor bug fixes to ensure all tools and solutions function in a reliable and secure fashion on all related Cyber Programs. Works on security engineering projects under direction of senior engineers. Performs troubleshooting of client security tools and solutions, and escalates issues to supervising engineers as needed. Performs tuning and configuration changes in coordination with change management and analyst stakeholders.

· Minimum Years of Experience: Minimum of two (2) years Information Technology experience; minimum one (1) year Cyber Security experience.

· Minimum Educational/Degree Requirements: Associate’s degree and one (1) year relevant experience with professional certification, such as Security+ or CEH -OR- two (2) years relevant experience with professional certification, such as Security+ or CEH.

· Substitution of Experience for Education: Four (4) years of total experience satisfies the minimum educational/degree requirement of an associate’s degree

· Substitution of Education for Experience: Each year of completed bachelor’s degree-level coursework equates to one (1) year of experience; each year of completed Master’s coursework equates to one (1) year of experience

Subject Matter Expert II (Cyber)

· Functional Responsibilities: Senior Technical Staff level personnel with extensive experience and credentials in cyber security typically requiring a long-term strategic perspective. Exhibits an exceptional degree of knowledge specific to advanced cyber security practices and tradecraft. Advises and/or applies highly optimized technologies, scientific principles, theories and concepts. Expert within the field. Information developed may form the basis of new concepts, strategies, theories, and products. Acts independently to uncover and resolve issues associated with the establishment and implementation of operational cyber security programs. Designs and oversees key analytic tasks and tests results involving complex data sets. Virtually self-supervisory.

· Minimum Years of Experience: Seven (7) years directly-related experience.

· Minimum Educational/Degree Requirements: Bachelor’s degree

· Substitution of Experience for Education: Nine (9) years of total experience satisfies the minimum educational/degree requirement of a bachelor’s degree

· Substitution of Education for Experience: Each year of completed master’s degree-level coursework equates to one (1) year of experience; each year of completed PhD coursework equates to one (1) year of experience Functional Subject Matter Expert III (Cyber)

· Functional Responsibilities: Keeps current on industry direction, trends, and future capabilities with respect to cyber threat analytics. Provides expertise for support of user requirements of complex to highly complex software/hardware applications, hunt methodologies, advanced actor campaigns and exploits and telemetry refinement related to Cyber. Directs and/or participates in all phases of incident response or hunt methodology (kill chain, pyramid of pain, diamond model). Provides expert level assistance to Digital Forensics and Incident Response and threat intelligence operations teams on advanced actor tactics, techniques and procedures (TTPs) related to Cyber.

· Minimum Years of Experience: Ten (10) years directly-related experience.

· Minimum Educational/Degree Requirements: Bachelor’s degree

· Substitution of Experience for Education: Twelve (12) years of total experience satisfies the minimum educational/degree requirement of a bachelor’s degree

· Substitution of Education for Experience: Each year of completed master’s degree-level coursework equates to one (1) year of experience; each year of completed PhD coursework equates to one (1) year of experience Cyber Hunt Specialist I (Cyber)

· Functional Responsibilities: Performs advanced analysis of adversary tradecraft, malicious code, and capabilities. Provides cyber threat and intelligence analysis, and develops briefings and reports to distribute and aid in information sharing and protection efforts. Develops and maintains subject matter expertise of Advanced Persistent Threats and assists with Incident Response efforts.

· Minimum Years of Experience: Seven (7) years directly-related experience.

· Minimum Educational/Degree Requirements: Bachelor’s degree

· Substitution of Experience for Education: Two (2) years of total experience satisfies the minimum educational/degree requirement of a bachelor’s degree

· Substitution of Education for Experience: Each year of completed master’s degree-level coursework equates to one (1) year of experience; each year of completed PhD coursework equates to one (1) year of experience Functional Subject Matter Expert II (Cyber)

· Functional Responsibilities: Keeps current on industry direction, trends, and future capabilities with respect to cyber threat analytics. Provides expertise for support of user requirements of complex to highly complex software/hardware applications, hunt methodologies, advanced actor campaigns and exploits and telemetry refinement related to Cyber. Reports to Functional SME III in all phases of incident response or hunt methodology (kill chain, pyramid of pain, diamond model). Provides assistance to Digital Forensics and Incident Response and threat intelligence operations teams on advanced actor tactics, techniques and procedures (TTPs) related to Cyber.

· Minimum Years of Experience: Eight (8) years directly-related experience.

· Minimum Educational/Degree Requirements: Bachelor’s degree

· Substitution of Experience for Education: Ten (10) years of total experience satisfies the minimum educational/degree requirement of a bachelor’s degree

· Substitution of Education for Experience: Each year of completed master’s degree-level coursework equates to one (1) year of experience; each year of completed PhD coursework equates to one (1) year of experience Functional Subject Matter Expert IV (Cyber)

· Functional Responsibilities: Keeps current on industry direction, trends, and future capabilities with respect to cyber threat analytics. Provides expertise for support of user requirements of complex to highly complex software/hardware applications, hunt methodologies, advanced actor campaigns and exploits and telemetry refinement related to Cyber. Directs and/or participates in all phases of incident response or hunt methodology (kill chain, pyramid of pain, diamond model). Provides expert level assistance to Digital Forensics and Incident Response and threat intelligence operations teams on advanced actor tactics, techniques and procedures (TTPs) related to Cyber. Can Manage Projects and Programs of any size.

· Minimum Years of Experience: Ten (10) years directly-related experience.

· Minimum Educational/Degree Requirements: Bachelor’s degree

· Substitution of Experience for Education: 14 years of total experience satisfies the minimum educational/degree requirement of a bachelor’s degree

· Substitution of Education for Experience: Each year of completed master’s degree-level coursework equates to one (1) year of experience.

Cyber Security Engineer IV (Cyber)

· Functional Responsibilities: Performs administration and engineering tasks for Cyber Security tools including, but not limited to firewalls, Host and Network Intrusion Detection/Prevention, SIEM tools, and Anti-Malware solutions. Performs research on new features, versions, and vendor bug fixes to ensure all tools and solutions function in a reliable and secure fashion. Directs security engineering projects and leads team of security engineers. Oversees troubleshooting of client security tools and solutions and advises clients of impacts to their risk. Oversees tuning and configuration changes in coordination with change management and analyst stakeholders. Can manage projects and programs of any size and level.

· Minimum Years of Experience: Eight (8) years directly-related experience.

· Minimum Educational/Degree Requirements: Bachelor’s degree

· Substitution of Experience for Education: Ten (10) years of total experience satisfies the minimum educational/degree requirement of a bachelor’s degree

· Substitution of Education for Experience: Each year of completed master’s degree-level coursework equates to one (1) year of experience.

Cyber Security Engineer V (Cyber)

· Functional Responsibilities: Performs administration and engineering tasks for Cyber Security tools including, but not limited to: firewalls, Host and Network Intrusion Detection/Prevention, SIEM tools, and Anti-Malware solutions. Performs research on new features, versions, and vendor bug fixes to ensure all tools and solutions function in a reliable and secure fashion. Directs security engineering projects and leads team of security engineers. Oversees troubleshooting of client security tools and solutions, and advises clients of impacts to their risk. Oversees tuning and configuration changes in coordination with change management and analyst stakeholders. Can manage projects and programs.

· Minimum Years of Experience: Ten (10) years directly related experience.

· Minimum Educational/Degree Requirements: Bachelor’s degree

· Substitution of Experience for Education: 14 years of total experience satisfies the minimum educational/degree requirement of a bachelor’s degree

· Substitution of Education for Experience: Each year of completed master’s degree-level coursework equates to one (1) year of experience.

Cyber Analyst I (Cyber)

· Functional Responsibilities: Provides for: planning; analyzing; designing; developing; documenting; test, training, and exercise (TT&E); operating; measuring/reporting; and/or administering cybersecurity systems, processes and procedures, support infrastructure, capabilities, and programs. Defines and interprets strategic requirements, analyzes and provides guidance, and executes cyber mission tasks including analysis support to penetration testing, incident response activities, cyber hunt activities, and risk and vulnerability assessments. Develops and leads projects, including defining scope, objectives, and methods. Can edit and technically write for any program including manuals, proposals as well as create graphics.

· Minimum Years of Experience: Two (2) years directly related experience.

· Minimum Educational/Degree Requirements: Bachelor’s degree

· Substitution of Experience for Education: 6 years of total experience satisfies the minimum educational/degree requirement of a bachelor’s degree

· Substitution of Education for Experience: Each year of completed master’s degree-level coursework equates to one (1) year of experience.

Cyber Analyst II (Cyber)

· Functional Responsibilities Provides for: planning; analyzing; designing; developing; documenting; test, training, and exercise (TT&E); operating; measuring/reporting; and/or administering cybersecurity systems, processes and procedures, support infrastructure, capabilities, and programs. Defines and interprets strategic requirements, analyzes and provides guidance, and executes cyber mission tasks including analysis support to penetration testing, incident response activities, cyber hunt activities, and risk and vulnerability assessments. Develops and leads projects, including defining scope, objectives, and methods. Develops advanced technological solutions and their implementation into a final product/deliverable. Meets program objectives and requirements and develops standards and guides. Contributes to the completion of specific cross-functional tasks and projects. Follows established procedures and contributes to the completion of milestones associated with specific projects. Can edit and technically write for any program including manuals, proposals as well as create graphics.

· Minimum Years of Experience: Six (6) years directly-related experience.

· Minimum Educational/Degree Requirements: Bachelor’s degree

· Substitution of Experience for Education: 12 years of total experience satisfies the minimum educational/degree requirement of a bachelor’s degree

· Substitution of Education for Experience: Each year of completed master’s degree-level coursework equates to one (1) year of experience.

Cyber Analyst III (Cyber)

· Functional Responsibilities Provides for: planning; analyzing; designing; developing; documenting; test, training, and exercise (TT&E); operating; measuring/reporting; and/or administering cybersecurity systems, processes and procedures, support infrastructure, capabilities, and programs. Defines and interprets strategic requirements, analyzes and provides guidance, and executes cyber mission tasks including analysis support to penetration testing, incident response activities, cyber hunt activities, and risk and vulnerability assessments. Develops and leads projects, including defining scope, objectives, and methods. Develops advanced technological solutions and their implementation into a final product/deliverable. Meets program objectives and requirements and develops standards and guides. Contributes to the completion of specific cross-functional tasks and projects. Follows established procedures and contributes to the completion of milestones associated with specific projects. Can edit and technically write for any program including manuals, proposals as well as create graphics. Can manage projects and programs and all lower level analysts and positions.

· Minimum Years of Experience: Seven (7) years experience.

· Minimum Educational/Degree Requirements: Bachelor’s degree

· Substitution of Experience for Education: Two (2) years of total experience satisfies the minimum educational/degree requirement of a bachelor’s degree

· Substitution of Education for Experience: Each year of completed master’s degree-level coursework equates to one (1) year of experience; each year of completed PhD coursework equates to one (1) year of experience

Service Contract Labor Standards: The Service Contract Labor Standards (SCLS), formerly known as the Service Contract Act (SCA), is applicable to this contract as it applies to the entire Multiple Award Schedule (MAS) and all services provided. While no specific labor categories have been identified as being subject to SCLS/SCA due to exemptions for professional employees (FAR 22.1101, 22.1102 and 29 CRF 541.300), this contract still maintains the provisions and protections for SCLS/SCA eligible labor categories. If and / or when the contractor adds SCLS/SCA labor categories to the contract through the modification process, the contractor must inform the Contracting Officer and establish a SCLS/SCA matrix identifying the GSA labor category titles, the occupational code, SCLS/SCA labor category titles and the applicable WD number. Failure to do so may result in cancellation of the contract.

image1.png