Our client needs an assessment of its current policy, processes, and procedures against NIST 800-53 Moderate Baseline (Appendix A – 287 Controls) with Privacy Baseline (Appendix B – 96 Controls) as detailed in the publication 800-53b (Control Baselines for Information Systems and Organizations).
These services will include:
A. Independent Security Assessment (ISA)
B. Security Modernization – NIST
C. Penetration Testing
D. Cloud Identity Security Testing
E. Internal Network Penetration Test
Mandatory
7 years’ experience within the last 10 years providing security vulnerability and risk assessment services directly or through a partner relationship. If the services are through a partner relationship, the partner must meet the minimum qualifications for their scope of services. Public Agency is preferred."
Security Certification either Certified Information Systems Security Professional (CISSP) or Certified Information Systems Auditor (CISA)."
2 years’ experience with industry standard compliance frameworks (CIS, NIST, OWASP)."
Understanding of State Administrative Manual (SAM) Section 5300, Information Security."
2 years’ experience and technical knowledge performing computer forensic.
7 years’ experience within the last 10 years in configuration, support, and architectural design of the following platforms in an enterprise environment:
• Palo Alto Next Generation Firewalls
• CISCO ASA Firewalls, Routers, Switches, and VPNs
• F5 BIG-IP appliances and modules"
3 years’ experience within the last 5 years in configuration, support, and architectural design of the following platforms in an enterprise environment
• Microsoft Active Directory
• AWS server-less Cloud Environment/AWS Services and Technologies
• Microsoft Azure Platform- as- a-Service technologies
• Apache web servers
• IIS web servers
• Linux servers
• Windows servers"
In addition to the mandatory qualifications identified above, the SOS desires Consultant(s) who, collectively or individually, possess some or all the following qualifications:
a) Cisco Certified Internetwork Expert (CCIE) Routing and Switching
b) Cisco Certified Network Professional (CCNP) Security
c) Microsoft Certified Solutions (Expert (MCSE) Server Infrastructure
d) Palo Alto Network Certified Network Security Engineer (PCNSE)
e) F5 Certified Technology Specialist (F5-CTS ASM)
f) GIAC Certified Penetration Tester
g) Internet Security Certified Product Specialist
h) 3 years’ experience within the last 5 years in configuration, support, and architectural design of the following platforms in an enterprise environment:
I. Databases to include: Microsoft SQL Server, Oracle Databases and MySQL Database
II. Web API Services
III. .NET Framework"
