Information Technology Security Vulnerability Assessment Services

The AGLC is seeking to engage a qualified consultant for comprehensive information security services. AGLC currently utilizes an expiring third-party contract for Security Threat and Risk Assessment specialists for information security services. These specialists perform Information Technology security vulnerability assessments as required. Work assignments are issued through Statements of Work (SOW) on a project-by-project basis. The scope of services includes: • Web application testing; • External vulnerability scanning; • Internal vulnerability scanning; • End-to-end integration point testing; • Security advisory services; and • Penetration testing. Projects encompass assessments of in-house and third-party developed applications, both on-premises and in the cloud, as well as managed software-as-a-service cloud systems. AGLC is seeking expertise in secure coding, including code scanning and reporting on vulnerabilities for in-house developed code. AGLC also requires a secure coding training facilitator for AGLC software developers.