Attachment D - Labor Category Descriptions.pdf

Attachment D – Labor Category Descriptions

1.0 Labor Categories

The contractor shall ensure that all contractor support delivered under this contract is provided using the labor categories and the associated qualifications described in this attachment as called for by each delivery order.

1.1 Primary Certifier

Contractor Qualifications

• Proficiency in MS Word due to their responsibility in writing several security artifacts to include documents such as Security Testing & Evaluation Plans.

• Contractor must be proficient in developing and presenting, both verbally and in writing, highly technical information and presentations to non-technical audiences at all levels of the organization. Audiences for this information include, but are not limited to, senior executives at TSA and other agencies.

• Working knowledge of the NIST- 800 publications governing the FISMA Act.

• Working knowledge of the NIST 800 series publications to include but not limited to: 800-

30, 800-37, 800-53 and 800-53a.

• Experience operating vulnerability scanning tools (i.e. NESUS, AppDetective, WebInspect and ISS) and others as required;

• Experience performing analysis of data from the scanning tools.

• Minimum of 3 years demonstrated experience conducting vulnerability and analysis of operating platforms (i.e. UNIX, Solaris, and Microsoft). Minimum 3 years experience performing compliance testing and analysis of web facing applications and database schema.

• Years Experience: minimum 3 years of strong relevant experience as outlined in the

Performance requirements

• Duty Location: TSA Headquarters, Arlington, VA

• Certification: Certification and Accreditation Professional (CAP), CISSP, CISM or CISA certification is preferred

• Clearance Requirements: Active Secret

• Travel: 15%

1.2 Risk Management Analyst

This role supports the risk management team in efforts to modernize the agency risk evaluation processes and methodologies to stay ahead of pace of federal requirements and industry best practices. Support includes assisting with development of technical solutions, administration of new and existing tools/applications, risk data trend analysis, vulnerability management analysis, report and document analysis, report and document production, participation in cross-programmatic working groups, and application troubleshooting amongst other related tasks.

Skills valued for this role are software development life cycle (SDLC) or systems engineering life cycle (SELC) experience, acquisitions experience, knowledge of SharePoint 2007/2010 functionality, NIST publications awareness and experience, knowledge of risk analysis or assessment process, proficient writer, advanced MS Excel capabilities, and abilities to multitask and work well in a team environment.

1.3 FISMA Analysts

• Certification: Certification and Accreditation Professional (CAP), CISSP, CISM or CISA certification is preferred

• Proficiency in the Microsoft Office Suite of tools to include extreme competency in Excel.

This is due to the format in which all TAF reports are produced, Excel spreadsheets, and the need for an analyst to manipulate thousands of lines of data into management-style information to be consumed by various stakeholders.

• Familiarity in the aforementioned TAF and RMS tools used daily by the FISMA analysts post award.

• Demonstrate knowledge of the NIST- 800 publications governing the FISMA Act.

• Contractor must be proficient in developing and presenting, both verbally and in writing, highly technical information and presentations to non-technical audiences at all levels of the organization. Audiences for this information include, but are not limited to, senior executives at TSA and other agencies.

• Knowledge and proficiency with Crystal Reporting.

• Demonstrate familiarity with vulnerability management (POA&M) from creation to closure.

• Years Experience: minimum 3 of strong relevant experience as outlined in the Performance requirements

• Duty Location: TSA Headquarters, Arlington, VA

• Hours: Core. Occasional non-core hour work as needed to fulfill system testing requirements.

• Travel: 5%

1.4 Information Systems Security Officer (ISSO)

• Contractor must be proficient in developing and presenting, both verbally and in writing, highly technical information and presentations to non-technical audiences at all levels of the organization. Audiences for this information include, but are not limited to, senior executives at TSA and other agencies.

• Contractor shall be able to manage single or multiple systems depending on the size and complexity. Experience shall be clearly outlined in resume.

• Thorough knowledge of, and experience with, the NIST 800 series publications to include:

800-30, 800-37, 800-53 and 800-53a.

• Previous experience creating all necessary Certification and Accreditation documentation.

Experience shall be clearly defined in the resumes

• Proficiency conducting and evaluating/analyzing results from the following set of tools, to include but not limited to: NESSUS, AppDetective, WebInspect and ISS.

• • Minimum of 3 years demonstrated experience with Enterprise Network devices (i.e.

routers, switches, firewalls). Experience shall be clearly outlined in resume.

• Minimum of 3 years demonstrated experience with Operating platforms (i.e. UNIX, Solaris, and Microsoft. Experience shall be clearly outlined in resume.

• Certification: Certification and Accreditation Professional (CAP), CISSP, or similar widely recognized IT Security certification is required

• Clearance Requirements: Active Secret clearance with ability to obtain Top Secret/SCI level access

• Years Experience: 3-6 of strong relevant experience as outlined in the Performance requirements; experience shall be outlined in the resume

• Duty Location: TSA Headquarters, Arlington, VA

• Hours: Core. Occasional non-core hour work as needed to fulfill system testing requirements.

• Travel: 10%

1.5 Policy Analyst (PA)

• Personnel shall have an authoritative knowledge of Government law and directives for predictive conversion into useful TSA-level policy and other governance documentation, including analyses of impacts.

• PA personnel shall be familiar with Government laws and directives, and shall have previous experience advising the Government on how to convert laws and directives into agency-level policy and other governance documentation.

• Contractor shall provide support to offices to ensure IT systems are authorized to operate in accordance with DHS and TSA IT security policy and procedures.

• Assist in developing repeatable IT security processes that define all TSA IT security activities.

• Thorough understanding of IT security requirements, technical security countermeasures, risk management processes, contingency planning, and data communications networking in an unclassified (SBU) and Classified environment.

• Proficiency in the use of Microsoft Office suite, including MS Project and Visio, and the ability to create, publish, and deliver briefing materials.

• Contractor must be proficient in developing and presenting, both verbally and in writing, highly technical information and presentations to non-technical audiences at all levels of the organization. Audiences for this information include, but are not limited to, senior executives at TSA and other agencies. Advanced expertise with National Institute of

Standards and Technology (NIST) CSRS Special Publications (SP) and Federal Information

Processing Standards (FIPS)

• Technical proficiency with IT Security technologies to include but not limited to:

o Operating Platforms o Infrastructure equipment

• Years Experience: 3 years related experience as outlined in the Performance Requirements.

• Duty Location: Springfield, VA, with occasional trips to TSA Headquarters, Arlington, VA

• Hours: Core

• Certification: CISSP, CISM, or similar is preferred

• Travel: Less than 5%

1.6 Program Analyst, Cyber Security Awareness and Outreach

• Knowledge of the NIPP, HSPD-7, and other national strategies and plans relating to securing our critical infrastructure and key resources.

• Contractor must be proficient in developing and presenting, both verbally and in writing, highly technical information and presentations to non-technical audiences at all levels of the organization. Audiences for this information include, but are not limited to, senior executives at TSA and other agencies.

• Strong operational familiarity with cyber security and/or CIKR protection best practices and processes, including risk assessment tools.

• Years Experience: minimum 3 years of strong relevant experience as outlined in the

Performance Requirements.

• Knowledge of the defensive and offensive measure to secure or defend national cyber systems.

• Years Experience: 3 minimum of strong relevant experience as required to accomplish the

Sections Objectives

• Duty Location: TSA Headquarters, Arlington, VA or TSA Springfield Satellite Facility

• Hours: Core with occasional non-core hour work as needed to fulfill program requirements.

• Clearance Requirements: Active Secret clearance with ability to obtain Top Secret/SCI level access

• Travel: 10%

1.7 ISSO Administrator – Cyber Security Awareness and Outreach

• A professional, intelligent, and adaptable personality, able to handle multiple, time sensitive tasks under strenuous timelines.

• Extremely honed communication skills; both written and oral.

• IT savvy, and willing and able to learn content while already being at least aware of certain standards and practices throughout the IT industry.

• Highly organized and capable of handling massive amounts of inquiries via email, phone calls, and one-on-one meetings

• Proficient in the Microsoft Office Suite, especially Excel, Powerpoint, and Word, a major plus would be experience and proficiency with MS Publisher

• Able to communicate effectively with technical personnel

• Able to draft and revise multimedia presentations using Microsoft PowerPoint in an expedient manner.

• Able to research emerging information security concepts and prepare related announcements

• Experience in organizing and/or facilitating outreach activities including professional development, workshops and other security-related events.

• Years Experience: minimum 3 of strong relevant experience as outlined in the Performance requirements

• Duty Location: TSA Headquarters, Arlington, VA

• Hours: Core. Occasional non-core hour work as needed to fulfill system testing requirements.

1.8 Focused Operations Analyst

organization. Audiences for this information include, but are not limited to, senior executives at TSA and other agencies.

• Proficiency with utilizing and evaluating results from the following set of tools to include but not limited to: Encase, FTK, Sawmill, Norman sandbox, Ida pro, and HB Gary.

• Proficiency with Operating Platforms to include but not limited to: Windows, Apple, and

LINUX.

• Previous experience with handling and processing of digital evidence to include imaging, chain of custody, and analysis

• Hands on experience with processing large data sets and RAID configurations

• Familiarity with networking technologies and packet structure.

• Experience as a court recognized expert witness in the area of digital evidence collection.

• Prior experience writing objective, accurate, and concise reports effectively communicating all findings to stakeholders

• Industry standard Forensic Certifications such as EnCE or SANS GIAC preferred.

• Years Experience: 6 minimum of strong relevant experience as outlined in the Performance

Objectives

• Duty Location: TSA Headquarters, Arlington, VA

• Hours: Core hours

• Clearance Requirements: Active Top Secret with previous SCI clearance held

1.9 E-Discovery Analyst

• Thorough understanding of E-Discovery and E-Discovery techniques and process. The

Contractor shall be able to design, maintain and operate E-Discovery hardware and software.

• Proficient in developing and presenting, both verbally and in writing, highly technical information and presentations to non-technical audiences at all levels of the organization.

Audiences for this information include, but are not limited to, senior executives at TSA and other agencies.

• Experience utilizing and evaluating results from the following set of E- Discovery tools including but not limited to: Attenex, Autonomy, and Concordance. Experience must be clearly identified in resume.

• Prior management experience leading a team of E-Discovery Analysts in day-to-day operations. Experience must be clearly identified in resume.

• Experience as a court recognized expert witness in the area of digital evidence collection.

Experience must be clearly identified in resume.

• Experience utilizing and evaluating results from the following set of E-mail recovery tools including but not limited to: Kroll Ontrack Power Controls and Paraben E-mail Examiner.

Experience must be clearly identified in resume.

• Hands on experience with the hardware and software associated with e-mail recovery and E-

Discovery. Experience must be clearly identified in resume.

• Experience working with legal professionals on cases. Experience must be clearly identified in resume.

• Years Experience: 6 minimum of strong relevant experience as outlined in the Performance

Objectives

• Duty Location: TSA Headquarters, Arlington, VA

• Hours: Core

1.10 Cyber Intelligence Analyst

organization. Audiences for this information include, but are not limited to, senior executives at TSA and other agencies. Management or Supervisory experience leading a team of Cyber Intel Analysts in day to day operations.

• Experience collecting intelligence and analyzing and creating relevant reports.

• Experience taking disparate, seemingly-unrelated intelligence and extract meaning or relevance from the data.

• Ability to act as a briefer to effectively communicate intelligence data in a concise, effective, and persuasive manner.

• Experience with different collection methods, i.e. Humint, Sigint, etc.

• Years Experience: 6 minimum of strong relevant experience as outlined in the Performance

Objectives

• Duty Location: TSA Headquarters, Arlington, VA

• Hours: Core

• Certification: CISSP, CISM, CISA, or similar widely recognized IT Security certification is preferred

• Clearance Requirements: Active Top Secret with previous SCI clearance held

1.11 Secure Communications Analyst

organization. Audiences for this information include, but are not limited to, senior executives at TSA and other agencies.

• Prior experience accurately tracking and documenting the issuance, inventory, and receipt of

COMSEC materials. Prior experience must be clearly identified in resume.

• Ability to teach and instruct users on the use and protection of COMSEC within their possession or care. Previous training experience is helpful but not required.

• Experience providing advanced troubleshooting on COMSEC devices including contacting technical resources from the manufacturer.

• Experience working in a federal environment on a COMSEC account of similar size, scope, and complexity. Experience and environment must be clearly identified in resume.

• Trained and certified with LMD/KP and EKMS.

• Possess NSA IAEC 2112 or DHS COMSEC Course of Instruction.

• Prior experience with secure telephony devices to include but not limited to: Secure Terminal

Equipment, Wireline terminals, secure cellular phones, Iridium, and secure data transfer devices.

• Prior experience with COMSEC Accounting Systems such as Distributed Information

Security Accounting System (DIAS).

• Extensive application and experience with the technical criteria outlined in the NSA 316

COMSEC policy manual. Experience must be clearly identified in resume.

• Extensive experience with the practical application of the communications infrastructure and network configuration of a myriad of network encryptors to include but not limited to: KG-

175D, KIV-7M. Experience must be clearly identified in resume.

• Experience in the Electronic Key Management System (EKMS) Local Management

Device/Key Processor (LMD/KP) System Manager for configuration management, software upgrades, and system equipment certification

• Duty Location: TSA Headquarters, Arlington, VA, Philadelphia PA, San Diego CA and San

Antonio TX

• Hours: Core hours with emergency on call status

• Clearance Requirements: Active Top Secret with the ability to obtain SCI

• Travel: 10% for Contracts at TSA Headquarters; 30% for contractors outside of Headquarters

1.12 IT Security Architecture (SA) Analyst

• Working knowledge and experience with the Enterprise Architecture frameworks such as

Zachman Framework, Federal Enterprise Architecture Framework, DODAF, TOGAF, and others.

• Thorough understanding of IT security engineering fundamentals, technical security countermeasures, risk management, contingency planning, and data communications networking in an unclassified (SBU) and classified environment

• Working knowledge and experience with an Enterprise Security Architecture (ESA) and the components or layers that supports it.

• Knowledge of emerging technologies and leading-edge IT and security products and toolsets.

• Ability to provide strategic planning, communicate the organization’s vision and objectives, set priorities, assign tasks and responsibilities, and monitor and evaluate TSA Security systems.

• Proficiency in the use of Microsoft Office suite, including MS Project, and Visio, as well as graphics packages to create, publish and deliver briefing materials.

• Contractor must be proficient in developing and presenting, both verbally and in writing, highly technical information and presentations to non-technical audiences at all levels of the organization. Audiences for this information include, but are not limited to, senior executives at TSA and other agencies. Familiarity with Systems Development Life-Cycle processes.

• Thorough understanding of IT security requirements, technical security countermeasures, risk management processes, contingency planning, and data communications networking in an unclassified (SBU) and Classified environment.

• Advanced expertise with National Institute of Standards and Technology (NIST) CSRS

Special Publications (SP) and Federal Information Processing Standards (FIPS)

• Technical proficiency with IT Security architectures and technologies to include but not limited to:

o Operating Platforms o Infrastructure equipment o Security devices

• Duty Location: Springfield, VA, with occasional trips to TSA Headquarters, Arlington, VA

• Hours: Core

• Certification: CISSP is required, and CISSP-ISSAP, or any Enterprise Architecture or

Enterprise Security Architecture certifications from FEAC, SABSA is highly preferred

• Travel: Less than 10%

2.0 KEY PERSONNEL

In accordance with the requirements set forth in Section H.14 of the contract, Key Personnel will be identified as appropriate on each individual delivery order and may be any of the above identified labor categories. Furthermore, changes to Key Personnel will only be allowed under the conditions set forth in Section H.14 of the contract.