Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, October 28 at 2:00 PM ET

Register Free →

Search

Top

Back to Contracts

OT VAPT Specialist (Industrial Control Systems)

Active

International

Response Deadline11/04/2026, 09:15:00 AM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

This subcontract opportunity is for an OT VAPT Specialist to provide vulnerability assessments and penetration testing for prime contractors working on automation projects for Pakistan State Oil Company Limited. The scope of work involves conducting both passive and active discovery of operational technology assets, utilizing OT-safe tools for vulnerability scanning, and performing controlled penetration testing on critical infrastructure including PLCs, HMIs, and SCADA systems. The final deliverable is a comprehensive VAPT Report that includes detailed risk ratings and actionable remediation recommendations. Qualified candidates must hold professional certifications such as GICSP or CISSP. The project is based in Pakistan and is categorized under NAICS code 541519. Interested parties must submit their responses by the deadline of November 4, 2026.

General Info

OT VAPT Specialist for Pakistan State Oil infrastructure testing, due November 4, 2026.

Agency

Pakistan State Oil Company Ltd

NAICS

541519 - Other Computer Related Services

Place of Performance

PAK

Set-Aside

NONE

Documents

This scope was carved out of IA-A4943-SJR.

The full solicitation package (1 document), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

RFP IA-A4943-SJR OT related VAPT and Security Review Engagement for Automation at Faisalabad, Keamari (KTA) and Machike

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedOct 21

subcontract

Response DeadlineNov 4

Submission deadline

Response Deadline

11/04/2026, 09:15:00 AM UTCin 14 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyPakistan State Oil Company Ltd

ContactsNo contacts available

OfficeN/A

Organization / AgencyPakistan State Oil Company Ltd

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Performs vulnerability assessments and penetration testing for prime contractors on Pakistan State Oil Company Limited automation projects. Conducts passive and active discovery of OT assets, performs vulnerability scanning using OT-safe tools, and executes controlled penetration testing on PLCs, HMIs, and SCADA systems. Requires GICSP or CISSP certifications. Delivers a VAPT Report with risk ratings and remediation recommendations.

Similar Contracts

Same NAICS industry code

CHANGE ORDER NOTICE: LRS VBS Mainframe Software Maintenance

Solicitation # 27-448DOIT-INFOT-B-54610

This special notice pertains to a change order for LRS VBS Mainframe Software Maintenance, identified by solicitation number 27-448DOIT-INFOT-B-54610. Issued by the State of Illinois through the Department of Innovation and Technology, the notice was posted on October 21, 2026, with a response deadline of November 4, 2026. The primary points of contact for this action are Purchaser Dave Carter and State Purchasing Officer Joshua Sergent. The change order is governed by specific legal and regulatory frameworks, including Section 33E-9 of the Criminal Code, Section 1-15.12 of the Procurement Code, and Section 1.2067 of the CPO-GS Administrative Rules. While the notice serves as a formal announcement of a contract modification, specific details regarding the contract value, pricing, and performance schedules are not provided in the available documentation.

INFOTECH448 - Information Technology

POSTED

about 4 hours ago

DEADLINE

Classified Data Sanitization ServicesThis subcontract involves providing secure erasure and sanitization services for classified data supporting Air Force Sustainment Center F-15 DMS projects. The scope of work focuses on the sanitization of Advanced Display Core Processors and Mission Cartridges using NSA-approved equipment to ensure units are ready for non-classified repair or disposal. The project is managed under the Department of Defense and will be performed in Warner Robins. Due to the nature of the classified data, the contractor must maintain a Facility Security Clearance and ensure all assigned personnel hold the necessary security clearances.

FA8538 Afsc Pzaab

POSTED

about 7 hours ago

DEADLINE

Technical Support Services (Help Desk)This subcontract for Technical Support Services (Help Desk) provides essential technical assistance to prime contractors working on Navy Recruiting Command projects. The scope of work includes troubleshooting access issues, offering technical guidance on platform utilization, and managing user accounts and credentials. These services are delivered during normal business hours through the use of customer support ticketing systems to ensure consistent platform uptime and ongoing operational support. Managed under NAICS code 541519 for the Department of Defense and Navsup Flt Logistics Ctr Norfolk, the work is performed in Millington, Tennessee. The opportunity was posted on October 21, 2026, with a response deadline of October 23, 2026.

Navsup Flt Logistics Ctr Norfolk

POSTED

about 7 hours ago

DEADLINE

LoRRca System Software Support

National Institutes Of Health Olao

POSTED

about 7 hours ago

DEADLINE

COMSEC Accountability & OperationsThe COMSEC Accountability and Operations subcontract, issued by the Department of Defense IT Contracting Division, focuses on managing communications security operations and accountability for prime contractors on USAWHC G-6 projects. Based in Fort Bragg, the role involves performing monthly and bi-annual inventories of controlled cryptographic items, managing hand-receipts, and conducting financial liability investigations regarding property loss to ensure accurate records and inventories. Qualified personnel must possess a Secret security clearance and have completed Department of War-mandated Key Management Infrastructure and COMSEC training. This opportunity falls under NAICS code 541519, with a response deadline set for November 2, 2026.

It Contracting Division - PL83

POSTED

about 7 hours ago

DEADLINE

Full-Spectrum Cybersecurity & RMFThis subcontract opportunity, titled Full-Spectrum Cybersecurity and RMF, supports prime contractors on USAWHC G-6 projects within the Department of Defense. The scope of work focuses on cybersecurity sustainment, risk management, and incident response, specifically requiring the performance of Risk Management Framework and Authority to Operate sustainment. Contractors will utilize vulnerability scanners and compliance tools to manage vulnerabilities and provide essential remediation reports to maintain a valid ATO. The project is based in Fort Bragg and requires personnel to hold either a Secret or Top Secret security clearance. Interested parties should note the response deadline of November 2, 2026. The contract falls under NAICS code 541519 and is managed through the IT Contracting Division of the Department of Defense.

It Contracting Division - PL83

POSTED

about 7 hours ago

DEADLINE

U.S. Government Software Support ServicesThis subcontract provides manufacturer-level technical support for Rustici Content Controller software to assist prime contractors working on the U.S. Coast Guard CG-OWL enterprise learning management system projects. Managed under the Department of Homeland Security's Special Mission Training Center, the contract ensures the operational capability of the CG-OWL system by utilizing Rustici Content Controller support infrastructure and delivering ongoing technical support entitlements. The services are governed by Rustici Software, LLC commercial support terms for U.S. Government customers and are categorized under NAICS code 541519. Performance for this engagement is centered in Norfolk, Virginia.

Special Mission Training Center (smtc)

POSTED

about 7 hours ago

DEADLINE

Cyber Security Engineering and Risk Management Framework Support

Solicitation # W91CRB-26-B-A006

Solicitation W91CRB-26-B-A006 is a firm-fixed-price commercial services contract issued by the Army Contracting Command - Aberdeen Proving Ground for Cybersecurity Engineering and DoD Risk Management Framework (RMF) Support Services. The contractor will provide all personnel, equipment, and supervision necessary to establish and maintain Authority to Operate (ATO) and RMF compliance for the Aberdeen Test Center (ATC) Local Area Network, Logically Isolated Network, Secure Test Environment, and Test and Evaluation Network. The period of performance spans from November 23, 2026, to November 22, 2031, consisting of a base year and four 12-month option years. This procurement is set aside for small businesses, with a specific preference for HUBZone and Women-Owned Small Businesses. Award will be made to the lowest-priced, responsive, and responsible bidder based on a Total Evaluated Price calculation. Key personnel requirements include a Senior IT Solutions Architect with CISSP certification and 10 years of RMF experience, as well as other IT professionals with CASP+ or equivalent certifications. Security requirements are stringent, requiring a Secret Facility Security Clearance at the time of bid submission, with specific personnel requiring Top Secret clearances for surge support and access to SIPRNet and Special Access Programs. The scope of work involves RMF lifecycle activities, including system categorization, security control implementation, and auditing for Secret and below environments, while following Intelligence Community Directive 503 for Top Secret requirements. Additional responsibilities include engineering and configuration support, incident management, and the implementation of a Quality Control Program within 30 days of award. Bidders must submit a single electronic volume containing administrative documents, a completed pricing schedule, and security compliance documentation by the specified deadline.

POSTED

about 7 hours ago

DEADLINE

DA10--Reviewed and Ready VISN Rad PACS - HL7 Conversion to DAS-SPOE

Solicitation # 36C25227Q0065

The Department of Veterans Affairs, through the VA Great Lakes Acquisition Center, intends to award a sole source, firm fixed price, one-time service contract to Change Healthcare Technologies/Optum. The scope of work involves the conversion to a DAS-SPOE HL7 interface for the CHC RAD PACS service. This procurement is conducted under the authority of 41 U.S.C. 1901 and FAR 12, based on the determination that Change Healthcare Technologies/Optum is the only responsible source capable of satisfying the requirements as they own and manufacture the necessary components and equipment already installed at the facility. The contractor is required to utilize certified authorized service technicians for the performance of these services. The project is categorized under NAICS code 541519 and will be performed within VISN 12. While this is a notice of intent for a sole source procurement, the government will consider capability statements from other firms that can demonstrate the ability to meet the requirements. Interested parties must submit detailed information regarding their products, services, and customer references via email in MS Word or Adobe PDF format to the contracting officer by 5:00 PM CST on October 23, 2026. The government maintains full discretion in determining whether to proceed with the sole source negotiation or to compete the procurement based on the responses received.

252-NETWORK Contract Office 12 (36C252)

POSTED

about 7 hours ago

DEADLINE

United States Army Western Hemisphere Command (USAWHC) G-6 Information Technology Service Management Western Command and Control System (WCCS)

Solicitation # 832674525

The United States Army Western Hemisphere Command (USAWHC) G-6 is issuing a Sources Sought Notice under solicitation 832674525 to identify capable small and large businesses to provide comprehensive Information Technology Service Management (ITSM) support for the Western Command and Control System (WCCS). The scope of work involves delivering and sustaining critical command and control, Unified Communications, Audio/Visual, and enterprise IT capabilities. Key functional requirements include service desk and information management operations for over 1,000 users, data center and network operations, and full-spectrum cybersecurity, specifically Risk Management Framework and Authority to Operate sustainment, vulnerability management, and COMSEC accountability. Additionally, the contractor must provide knowledge management solutions using Microsoft 365, SharePoint Online, and the Power Platform. The anticipated period of performance begins February 1, 2027, with a one-year base period and four option years. Primary performance locations include Fort Liberty and Camp Mackall in North Carolina, Joint Base San Antonio in Texas, with limited support at Fort Hood and Aberdeen Proving Ground, and potential travel to regional Deployable Communications Element locations. All personnel must hold at least a Secret security clearance, with some positions requiring Top Secret clearance, and those supporting partner nations in the SOUTHCOM area of responsibility must be professionally fluent in Spanish and Portuguese. The government is seeking capabilities from various socio-economic categories, including 8(a), SDVOSB, HUBZone, and Woman-Owned Small Businesses, under NAICS 541519. Interested respondents must submit a capabilities statement of no more than five pages by November 2, 2026.

It Contracting Division - PL83

POSTED

about 7 hours ago

DEADLINE

Regional OT Field Technician / Site LiaisonThis subcontract for a Regional OT Field Technician / Site Liaison involves providing on-site technical support and hardware connectivity for prime contractors working on Pakistan State Oil Company Limited projects. The scope of work is centered in Faisalabad, Keamari, and Machike, where the technician will manage physical access to control cabinets and server rooms, connect testing hardware to network ports, and monitor overall system stability during testing phases. The role requires strict adherence to oil and gas facility safety standards, necessitating site-specific HSE safety certifications. Key deliverables include the maintenance and delivery of site access logs. Interested parties should note the response deadline of November 4, 2026, for this specialized technical support engagement within Pakistan.

Pakistan State Oil Company Ltd

POSTED

about 12 hours ago

DEADLINE

RFP IA-A4943-SJR OT related VAPT and Security Review Engagement for Automation at Faisalabad, Keamari (KTA) and Machike

Solicitation # IA-A4943-SJR

Pakistan State Oil Company Ltd has issued solicitation IA-A4943-SJR for an Operational Technology related Vulnerability Assessment and Penetration Testing (VAPT) and Security Review Engagement. The project focuses on the security review of automation systems located at three specific sites: Faisalabad, Keamari (KTA), and Machike. The agency is seeking eligible contractors who possess adequate financial capabilities and relevant past experience to execute this security engagement. The procurement follows a Single Stage – Two Envelope bidding procedure, with all submissions required as sealed e-bids via the SAP Ariba portal. Interested vendors must be registered on the portal to participate. The deadline for bid submission is November 4, 2026, by 2:15 PM. Primary contact for this engagement is Sania Javed.

Pakistan State Oil Company Ltd

POSTED

about 12 hours ago

DEADLINE

More opportunities from Pakistan State Oil Company Ltd

Same awarding agency

AD-20005-MSR RFP (ACs for PSO Locations)

Solicitation # Doc341909624

POSTED

about 10 hours ago

DEADLINE

OT Security Review & Governance ConsultantThe OT Security Review and Governance Consultant subcontract involves performing critical security assessments of automation architecture and policies for prime contractors working on Pakistan State Oil Company Limited projects. The scope of work focuses on ensuring robust operational technology security through the review of network diagrams for Purdue Model segmentation and the auditing of firewall rules and access control lists between IT and OT zones. The consultant is responsible for conducting a detailed gap analysis based on IEC 62443 and NIST SP 800-82 standards to identify vulnerabilities and compliance shortcomings. Key deliverables for this engagement include a comprehensive Security Review Report and a formal Gap Analysis document. The project is based in Pakistan, with a response deadline of November 4, 2026.

Administrative Management and General Management Consulting Services

POSTED

about 12 hours ago

DEADLINE

Aviation Equipment Rigging & HandlingThis subcontract for Aviation Equipment Rigging and Handling involves providing specialized rigging and loading services for prime contractors working on Pakistan State Oil Company Limited aviation asset projects in Pakistan. The scope of work focuses on the precise calculation of load distribution and the execution of lifting and loading processes using industrial cranes, rigging slings, and heavy-duty jacks to ensure refuellers are balanced according to strict aviation safety standards. The project requires the deployment of certified riggers and crane operators to ensure the secure loading and unloading of equipment. Interested parties must note that the solicitation was posted on October 21, 2026, with a response deadline of November 2, 2026. The contract falls under NAICS code 238990 and is managed by the Pakistan State Oil Company Ltd.

All Other Specialty Trade Contractors

POSTED

about 13 hours ago

DEADLINE

Heavy Haulage & Specialized TransportThis subcontract for Heavy Haulage and Specialized Transport involves the physical transport of an aviation refueller for prime contractors supporting Pakistan State Oil Company Limited logistics projects. The scope of work requires the loading, securing, and road transport of the vehicle from Sialkot Airport to Lahore Airport, concluding with the unloading and precise positioning of the refueller at its final destination to ensure a safe handover. To execute these services, the contractor must utilize heavy-duty low-boy trailers or specialized flatbeds and employ drivers holding a Commercial Driver's License with oversized load endorsements. The solicitation was posted on October 21, 2026, with a response deadline of November 2, 2026, and falls under NAICS code 484220 for performance within Pakistan.

Specialized Freight (except Used Goods) Trucking, Local

POSTED

about 13 hours ago

DEADLINE

PSO AM-20135-SI Services for Shifting of Aviation Refueller from Sialkot Airport to Lahore Airport

Solicitation # Doc341861308

Pakistan State Oil Company Ltd has issued solicitation Doc341861308 for services to shift an aviation refueller from Sialkot Airport to Lahore Airport. The procurement process follows a Single Stage Two Envelope bidding procedure, where commercial bids will only be opened for bidders who are first determined to be technically qualified. Interested parties must submit sealed e-bids via the SAP Ariba Portal, and the initial request for tender documents requires a signed and stamped copy on official letterhead. The response deadline for this solicitation is November 2, 2026, with the posting date listed as October 21, 2026. Evaluation for the award is based on the bidder's status as an eligible contractor with adequate past relevant experience. Primary contact for this requirement is Saad A. Ansari.

Specialized Freight (except Used Goods) Trucking, Long-Distance

POSTED

about 13 hours ago

DEADLINE

Canopy Painting (Pakistan Flag Branding)This subcontract involves the painting of the Pakistan Flag on canopies for prime contractors working on Pakistan State Oil New Vision Retail Outlet projects within the Islamabad Division. The scope of work includes preparing canopy exteriors and applying exterior-grade paints to execute flag designs, utilizing necessary equipment such as ladders, scaffolding, or lifts to complete the branding. Eligible contractors must maintain an active NTN and full GST/PST tax compliance, along with a documented clean safety record spanning the previous five years. The solicitation was posted on October 21, 2026, with a response deadline of November 2, 2026.

Painting and Wall Covering Contractors

POSTED

about 13 hours ago

DEADLINE

PSO RF 50098 FK - Painting of Pakistan Flag on Canopies at Various PSO New Vision Retail Outlets (NVROs), Islamabad Division

Solicitation # Doc341861907

The Pakistan State Oil Company Limited Islamabad Divisional Office is soliciting bids for the painting of the Pakistan flag on canopies at various New Vision Retail Outlets within the Islamabad Division. This procurement is conducted under PPRA Clause 42 b, with the submission window open from October 21, 2026, to November 2, 2026, via the SAP Ariba portal. Bidders must submit their proposals between 08:30 AM and 02:15 PM, and any offers submitted after the deadline or those that are conditional or partial will be rejected. Eligible contractors must be active taxpayers with adequate financial capabilities and relevant past experience. Mandatory requirements include providing a scanned copy of a signed and stamped request on official letterhead, a valid NTN, GST/PST certificates, and the CNIC of the owner or authorized representative. Additionally, vendors must certify that they have not been blacklisted by PSO or any other firm and have not been involved in any fatal accidents during project execution within the last five years. Any submission of incomplete or false information will result in the immediate rejection of the offer.

Painting and Wall Covering Contractors

POSTED

about 13 hours ago

DEADLINE

Supply of Industrial Floor Tiles and GroutThis subcontract involves the supply and delivery of industrial-grade ceramic or porcelain floor tiles and high-strength waterproof grouting materials for Pakistan State Oil Company Ltd facility projects. The selected provider will be responsible for sourcing heavy-duty, slip-resistant tiling and mortar, ensuring all materials are delivered directly to the PSO-77 CORO site located in Piffer, Pakistan. To be eligible for this contract, suppliers must maintain active taxpayer status, including valid NTN, GST, and PST registrations. The solicitation was posted on October 21, 2026, with a response deadline set for November 2, 2026.

Ceramic Wall and Floor Tile Manufacturing

POSTED

about 13 hours ago

DEADLINE

Installation of Car Wash Floor TilesThis subcontract involves the installation of industrial-grade car wash floor tiles for projects at Pakistan State Oil Company Ltd facilities. The scope of work includes applying bonding agents, laying and leveling industrial non-slip tiles, and performing comprehensive grouting and sealing to ensure full water resistance. The final deliverable is a fully installed, waterproofed tiled floor meeting industrial standards. Eligible bidders must possess proven experience in industrial flooring and maintain active taxpayer status, including NTN, GST, and PST registrations. The solicitation was posted on October 21, 2026, with a response deadline of November 2, 2026. Performance of the contract will take place at designated PSO sites within Pakistan.

Tile and Terrazzo Contractors

POSTED

about 13 hours ago

DEADLINE

Demolition and Removal of Existing Floor TilesThis subcontract involves the demolition and removal of existing floor tiles for projects at Pakistan State Oil Company Ltd facilities. The scope of work includes breaking and lifting tiles, removing old adhesive and mortar, and hauling away all construction debris. Additionally, the contractor is responsible for cleaning and leveling the concrete slab using jackhammers and floor scrapers to deliver a cleared and leveled concrete substrate. Eligible contractors must maintain active taxpayer status, including NTN, GST, and PST registrations, and possess a clean safety record. The project is located in Pakistan, with a response deadline set for November 2, 2026.

Site Preparation Contractors

POSTED

about 13 hours ago

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS