Peregrine Technical Solutions, LLC

Transcription

1 GENERAL SERVICES ADMINISTRATION Federal Supply Service Authorized Federal Supply Schedule Price List On-line access to contract ordering information, terms and conditions, up-to- date pricing, and the option to create an electronic delivery order are available through GSA Advantage!, a menudriven database system. The INTERNET address for GSA Advantage! is: GSAAdvantage.gov. Solicitation Number: FCIS-JB B Schedule 70, Refresh 34 General Purpose Commercial Technology Services SIN: Technology (IT) Professional Services SIN: F Identity and Access Management Professional Services FPDS Code D301 IT Facility Operation and Maintenance FPDS Code D302 IT Systems Development Services FPDS Code D306 IT Systems Analysis Services FPDS Code D307 Automated Systems Design and Integration Services FPDS Code D308 Programming Services FPDS Code D310 IT Backup and Security Services FPDS Code D311 IT Data Conversion Services FPDS Code D316 IT Network Management Services FPDS Code D399 Other Technology Services, Not Elsewhere Classified Contract number: GS35F233CA For more information on ordering from Federal Supply Schedules click on the FSS Schedules button at fss.gsa.gov. Contract period: August 13, 2015 August 12, 2015 Contents Company Overview.. 2 Special Expertise and Services 2 Contact. 2 Labor Category Pricelist.. 3 Labor Category Descriptions... 4 General Contract

2 Business size. Small Alaska Native Corp. (ANC) 8(a) HBZ Company Overview Peregrine Technical Solutions LLC (Peregrine) is a partially-owned subsidiary of Goldbelt, Incorporated, an Alaska Native Corporation. Founded in 2011, we focus heavily on cyber offense /defense activities to include full-spectrum Assurance (IA), Computer Forensics, and Cyber Warfare. The core of Peregrine s expertise lies in its officers: Dr. Leigh Armistead and David Wolfe. Each has over 25 years experience in key Cyber Security, Assurance, and Operations (IO) positions in support of the Federal Government and Department of Defense (DoD), and both possess multiple professional certifications to include the Certified Systems Security Professional (CISSP). In addition, we have three fully qualified Navy Validators/Certification Agents, and our company is registered as a Corporate Fully Qualified Navy Validator (C0124 Specifically, the Peregrine staff has expertise in the following areas: Assurance Computer Forensics Cyber Warfare Peregrine Technical Solutions can provide specialized services including: Security Assessments / Audits Penetration Tests/Hacking Policies and Procedures Support Risk Management Support Training and Education Support Peregrine Technical Solutions 114 Ballard Street, PO Box 520, Yorktown, VA Tel: Fax: Contract Administrator: Sheila Fetherlin 2

3 LABOR CATEGORY PRICE LIST Includes IFF SIN: Technology (IT) Professional Services SIN: F Identity and Access Management Professional Services Select Peregrine Subject Matter Expert Hourly Rate Chief Security Officer (CSO) $ Senior Systems Security Manager (SISSM) $ Senior Computer Forensics Examiner (SCFE) $ Senior System Auditor (SISA) $ Senior Data Security Analyst (SDSA) $ Senior Systems / Network Security Administrator (SS/NSA) $ Senior Penetration Tester (SPT) $ Certified System Security Professional (CISSP) $92.04 Security Manager (SM) $87.19 Network Security Engineer (NSE) $86.22 Certified Ethical Hacker (CEH) $70.53 Systems Security Technical Writer $62.77 Select Peregrine Labor Categories Hourly Rate Internet Security Engineer III $86.22 Assurance SME $ Assurance Engineer $ Systems Analyst $90.68 Senior Applications Engineer $ Senior Database Manager $

4 LABOR CATEGORY Chief Security Officer (CSO) Senior Systems Security Manager (SISSM) Senior Computer Forensics Examiner (SCFE) LABOR CATEGORY DESCRIPTIONS FUNCTIONAL EDUCATION RESPONSIBILITIES SUBJECT MATTER EXPERTS The CSO is the top security executive in the company and is the executive responsible for the organization s entire security posture. Manages the development and implementation of global security policy, standards,. guidelines and procedures. Identifies protection goals, objectives and metrics consistent with corporate strategic plan. Provides oversight for the establishment, implementation and adherence to policies and standards that guide and support the terms of the information security strategy. Provides risk management activities that assure an acceptable level of risk for the organization/project. Manages the information security incident management program to ensure the prevention, detection, containment and correction of security breaches. Acts as a lead participant in the resolution of problems concerning security violations. Uses forensic tools and investigative methods to find specific electronic data, including internet use history, work processing documents, images and other files. Find and retrieve files and information that has been hidden, deleted or lost. Assists in the official analysis of data and evaluates its relevance to the specific situation. EXPERIENCE At least ten years of extensive information technology experience, as well as 5 to 7 years managing staff, processes and policies. Must have significant experience dealing with cyber security issues. Seven+ years of progressive experience in information security, networking and computing. Experience to include operating systems, general network architecture, firewalls, proxies, intrusion detection systems, security information and event management, penetration testing, vulnerability assessments, malware incident handling virtual private networks, risk analysis and compliance testing. Five or more years of related progressive experience. Certified Forensic Computer Examiner (CFCE) certification is preferred. 4

5 LABOR CATEGORY Senior System Auditor (SISA) Senior Data Security Analyst (SDSA) FUNCTIONAL RESPONSIBILITIES Performs risk assessments of technology activity and processes and develops risk based work plans to complete audit and control objectives. Develops audit recommendations to mitigate risks and achieve business and technology objectives; assists in completion and development of annual audit plan. Coordinates audit activities for assigned audit project, including notification of all affected parties of audit timing, scope, objectives, approach and deliverables. Monitors implementation of outstanding audit recommendations and validates their implementation. Performs all procedures necessary to ensure the safety of information systems and to protect systems from intentional or inadvertent access or destruction. Interfaces with user community to understand their security needs and implements procedures to accommodate them. EDUCATION EXPERIENCE Certified Systems Auditor (CISA) and/or Certified in Risk and Systems Control (CRISC) strongly preferred. Other certifications add value such as Certified in Governance of Enterprise IT (CGEIT), Certified Security Manager (CISM), Certified Security Professional (CISSP), CPA, and/or CIA. Minimum three years of internal or external audit experience Must have a minimum of five+ years experience in increasingly responsible positions within the Data Security, Data Administration, Database development or equivalent disciplines. Demonstrated success in related activities in the last 3 to 5 years Senior Systems/ Network Security Administrator (SS/NSA) Provides leadership and management for all systems/network administration. Assumes responsibility to assure that all information technology meets service requirements and performance objectives. Configures, manages and maintains network security functions such as firewalls, traffic shaping and management. Implements strong network security configurations, installs firmware and software patches, remediate vulnerabilities, and research security incidents. Ten+ years Network Security Administration experience. Must have demonstrated leadership and management skills. Senior Penetration Tester (SPT) Performs manual testing to assess the security of systems and Web sites in order to identify vulnerabilities. Performs penetration tests against various systems, including Web applications, databases, Web services, network devices, operating systems, Cloud installations, and infrastructure devices. Performs manual security testing of multiple Web sites using a Web proxy without the use of a scanner. Interprets the identified vulnerabilities, remove false positives, and provide a detailed report with risk, Ten+ years of experience in the field of information technology. Five+ years of experience with performing Web application security assessments and network penetration tests. Experience with testing at least 30 different Web applications using manual methods and using a Web proxy tool 5

6 LABOR CATEGORY FUNCTIONAL RESPONSIBILITIES impact, recommendations to remediate the risk, and step-by-step instructions for reproducing the issue. EDUCATION EXPERIENCE Certified System Security Professional (CISSP Supports plans and procedures to protect computer and telephone systems, telecommunications network and databases from loss or destruction. Maintains a high level of availability to computing and telecommunication resources.. MS degree a plus. CISSSP certification mandatory. Seven+ years of hands on security design and implementation experience in a large scale environment with five+ years of responsible management experience, including managing managers, and direct project management of large automation systems projects. Security Manager Provides guidance regarding information security programs and provides vision, strategy, and hands-on execution of security initiatives. Ensures compliance with security standards, governmental regulations and company policies. Seven+ years experience in Security Management. 7 years experience in a technical environment. Network Security Engineer Manages firewalls and network perimeter security systems. Documents and reports all systems changes, upgrades and entry requests. Develops pro-active network security procedures designed to prevent intrusion attacks. Performs network system security audits. Analyzes risk factors and recommends procedure and products to prevent intrusion attacks Six years related experience and a proven security expert. Must be well versed in: scanning/monitoring, intrusion detection, penetration testing, incident response, white/gray/black box testing, system hardening Certified Ethical Hacker Conducts advanced penetration tests to identify vulnerabilities in computer systems, which could be penetrated by malicious intruders. Simulates breaches to network security and develops measures to lock down areas of risk. Also ensures that the system is firewalled, security protocols are in place and sensitive files are encrypted. Bachelor's Degree with specialization in Assurance, Forensics or Security.Certifications: Security+, Certified Ethical Hacker, CISSP Extensive experience in the area of network security and a working knowledge of various operating systems. Minimum five years current experience 6

7 LABOR CATEGORY Systems Security Technical Writer Internet Security Engineer III Assurance SME Assurance Engineer FUNCTIONAL RESPONSIBILITIES Independently manages all projectrelated documentation and assists with the authoring, proofing and quality control of project documentation, technical reports, research publications and presentations. Analyzes general information assurancerelated technical problems and provides basic engineering and technical support in solving these problems. Designs, develops, engineers, and implements solutions that meet network security requirements. Performs vulnerability/risk analyses of computer systems and applications during all phases of the system development life cycle. Responsible for developing, implementing, and enforcing IA policies and procedures; prepares plans, instructions, guidance, and operating procedures; develops security requirements; participates in risk assessments; ensures compliance with standards; ensures inspections, tests, and reviews are conducted; reviews and evaluates the adequacy of security measures. Supports the client's information assurance (IA) program manager to provide effective IA development, implementation, operation, maintenance, and modification to meet DoD and DoN IA requirements. Works with the IT system owners to coordinate with command security requirements and provide systems engineering. EDUCATION Select Peregrine Positions... EXPERIENCE Five years experience writing original technical documentation. Experience documenting complex information technology systems and research results. Experience reviewing and editing work products written by other team members. Mastery of English grammar style and syntax. Mastery of Microsoft Office products including Word and PowerPoint One to three years experience in programming or software development and implementation. Other areas of expertise required include familiarity with XML, web content management systems, e- commerce systems, JAVA script applications, and various Microsoft technologies, as well as LAN and WAN technologies. Six+ years of experience in the field or in related area. Experience may be substituted for a degree. A broad understanding of IA policies, processes, and procedures. Experience in the preparation, coordination, and submittal of DIACAP documentation and certification and accreditation request. Experience evaluating IA issues and developing and implementing solutions to address those issues Three+ years of experience supporting threat intelligence, cyber security, or incident response Systems Analyst Designs new IT solutions to improve business efficiency and productivity. Works closely with the client to examine existing business models and flows of Two years of specialized experience. Alternative Experience Requirements: One year of specialized experience and a 7

8 LABOR CATEGORY FUNCTIONAL RESPONSIBILITIES data, discusses findings with the client, and designs an appropriate improved IT solution. Produces outlines of new systems, specifying the operations the system will perform, and the way data will be viewed by the end-user, presents designs to the client and works closely with the client team to implement the solution. EDUCATION. EXPERIENCE Master s Degree in one of the following fields: Computer Science, related scientific or technical discipline. Senior Applications Engineer Devises or modifies procedures to solve complex problems considering computer equipment capacity and limitations, operating time and form of desired results. Prepares detailed specifications from which programs will be written. Analyzes and revises existing system logic difficulties and documentation as necessary. Seven years of specialized experience. Alternative experience requirements: Master's degree in one of the following fields: Computer or other related scientific or technical discipline and five years of specialized experience. Senior Database Manager Participates in the design, creation, and maintenance of computerized databases. Responsible for the quality control and auditing of databases to ensure accurate and appropriate use of data. Works with management to develop database strategies to support organization requirements. Consults with and advises users on access to various databases. Works directly with users to resolve data conflicts and inappropriate data usage. Directs the maintenance and use of the corporate data dictionary. Strong applicable experience (a minimum of 6 years information assurance experience) may be taken into account in lieu of a degree. 8

9 GENERAL CONTRACT INFORMATION 2. Maximum order SIN :. $500, Maximum order SIN F: $1,000, Minimum order SIN : $ Minimum order SIN F: $ Geographic coverage (delivery area). 50 United States and US Territories. 5. Point(s) of production (city, county, and State or foreign country). N/A 6. Discount from list, prices or statement of net price. None 7. Quantity discounts None 8. Prompt payment terms None 9a. Notification that Government purchase cards are accepted at or below the micro-purchase threshold. Commercial credit cards and/or Government purchase cards are accepted in full. 9b. Notification whether Government purchase cards are accepted or not accepted above the micro-purchase threshold.. Commercial credit cards and/or Government purchase cards are accepted in full 10. Foreign items (list items by country of origin) None. 11a. Time of delivery. (Contractor insert number of days.) As negotiated between ordering agency and contractor. l1b. Expedited Delivery. The Contractor will insert the sentence Items available for expedited delivery are noted in this price list. Under this heading. The Contractor may use a symbol of its choosing to highlight items in its price lists that have expedited delivery N/A l1c. Overnight and 2-day delivery. The Contractor will indicate whether overnight and 2-day 9

10 delivery are available. Also, the Contractor will indicate that the schedule customer may contact the Contractor for rates for overnight and 2-day delivery. N/A 11d. Urgent Requirements. The Contractor will note in its price list the Urgent. Requirements clause of its contract and advice agencies that they can also contact the Contractor s representative to affect a faster delivery. 12. F.O.B. point(s). F.O.B. Origin. 13a. Ordering address(es). Peregrine Technical Solutions 114 Ballard Street, PO Box 520, Yorktown, VA Tel: Fax: b. Ordering procedures: For supplies and services, the ordering procedures, information on Blanket Purchase Agreements (BPAs), and a sample EPA can be found at the GSA/FSS Schedule homepage (fss.gsa.gov/schedules). 14. Payment address(es) Peregrine Technical Solutions 114 Ballard Street, PO Box 520, Yorktown, VA Warranty provision. Warranty terms are standard commercial warranty on materials and workmanship for a period of 1 year date of purchase. 16. Export packing charges: N/A 17. Terms and conditions of Government purchase card acceptance (any thresholds above the micro-purchase level) 18. Terms and conditions of rental, maintenance, and repair (if applicable) N/A 19. Terms and conditions of installation (if applicable). N/A 20. Terms and conditions of repair parts indicating date of parts price lists and any discounts from list prices (if applicable). N/A 20a. Terms and conditions for any other services (if applicable) N/A 10

11 21. List of service and distribution points (if applicable). N/A 22. List of participating dealers (if applicab1). N/A 23. Preventive maintenance (if applicable). N/A 24a. Special attributes such as environmental attributes (e.g., recycled content, energy efficiency, and/or reduced pollutants) N/A 24b. If applicable, indicate that Section 508 compliance information is available on Electronic and Technology (EIT) supplies and services and show where full details can be found (e.g. contractor s website or other location.) The EIT standards can he found at N/A 25. Data Universal Number System (DUNS) number Notification regarding registration in Central Contractor Registration (CCR) database. CCR is now called SAM and Peregrine Technical Solutions has a valid registration. It was reviewed and updated and the Periodic Update Requirement Date for the registration is now 19 November