Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, October 28 at 2:00 PM ET

Register Free →

Search

Top

Back to Contracts

QA Testing & Security Auditor

Active

State & Local

Response Deadline11/13/2026, 06:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

This subcontract for the Massachusetts Executive Office of Education involves providing QA testing and security auditing services for prime contractors on Department of Higher Education projects. The scope of work includes iterative testing, code reviews, and load testing designed to support 80,000 concurrent users. A critical component of the role is the validation of AI-generated code to ensure human approval and strict traceability in accordance with NIST, SANS, and Commonwealth security controls. The selected provider will utilize automated testing suites and load testing tools to deliver comprehensive test reports, security audit logs, and a validated minimum viable product. This opportunity is categorized under NAICS code 541519, with performance located in Everett, Massachusetts. Interested parties must respond by the deadline of November 13, 2026.

General Info

QA testing and security auditing for Massachusetts Department of Higher Education projects.

Agency

Massachusetts → Executive Office of Education

NAICS

541519 - Other Computer Related Services

Place of Performance

Santilli Highway Everett, MA, 02149, USA

Set-Aside

NONE

Documents

This scope was carved out of BD-27-1036-EDU02-EDU02-134845.

The full solicitation package (10 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

Student Portal RFQ

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedOct 26

subcontract

Response DeadlineNov 13

Submission deadline

Response Deadline

11/13/2026, 06:00:00 PM UTCin 16 days

Ready to pursue this opportunity?

Get full access to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyMassachusetts → Executive Office of Education

ContactsNo contacts available

OfficeN/A

Organization / AgencyMassachusetts → Executive Office of Education

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Performs testing and security validation for prime contractors on Department of Higher Education (DHE) projects. Conducts iterative testing, code reviews, and load testing for 80,000 concurrent users. Validates AI-generated code for human approval and traceability per NIST, SANS, and Commonwealth security controls. Uses automated testing suites and load testing tools. Delivers test reports, security audit logs, and a validated MVP.

Similar Contracts

Same NAICS industry code

Cybersecurity Compliance and RMF Accreditation

POSTED

about 3 hours ago

DEADLINE

Mosquito Liquid Handler Software Support and Troubleshooting

National Institutes Of Health Olao

POSTED

about 3 hours ago

DEADLINE

CMMC and NIST SP 800-171 Compliance Support

POSTED

about 3 hours ago

DEADLINE

FY27 COMCAST GOVERNMENT SERVICES LLC FY27 OPTION YEAR EXERCIZED

Solicitation # FY27OYCOMCASTGOVERNMENTSERVICES

Department Of Justice US Marshal Service

POSTED

about 3 hours ago

DEADLINE

HID DigitalPersona Support and Maintenance ProviderThis subcontract involves providing ongoing technical support and maintenance for the HID DigitalPersona Premium Package to support prime contractors on projects for the Department of the California Highway Patrol. The scope of work includes executing standard support for 3,300 units, along with co-termed support for additional groups of 3,090 and 732 units across designated performance periods to ensure continuous active coverage. To qualify for this engagement, the provider must hold an Authorized HID Global Support Certification and maintain compliance with GSPD-401 standards. The project falls under NAICS code 541519 and is managed through the state of California's procurement system.

Department of the California Highway Patrol

POSTED

about 15 hours ago

DEADLINE

Data Security & Cybersecurity ComplianceThis subcontract for Data Security and Cybersecurity Compliance supports the Maryland Transportation Authority by implementing and monitoring security protocols for prime contractors involved in debt collection projects. The scope of work focuses on managing data redundancy, backup systems, and disaster recovery processes to ensure operational continuity. To maintain strict adherence to state and federal privacy laws as well as PCI-DSS standards, the contractor will utilize specialized encryption tools and security monitoring software while providing regular security audit reports and comprehensive disaster recovery plans. The opportunity is categorized under NAICS code 541519 and was posted on October 27, 2026. Interested parties must submit their responses by the deadline of December 15, 2026. Further details regarding the procurement process can be accessed through the Maryland eMaryland Marketplace portal.

Maryland Transportation Authority

POSTED

about 19 hours ago

DEADLINE

in about 2 months

Tier II-IV Technical Support ServicesThis subcontract opportunity for the Maryland Transportation Authority involves providing Tier II, III, and IV technical support services to assist prime contractors with debt collection projects. The scope of work focuses on performing advanced technical troubleshooting and resolving complex issues related to collection software to ensure consistent system uptime. The selected provider will utilize remote support tools and ticketing systems to deliver software problem solutions and manage technical tickets. This procurement falls under NAICS code 541519, with a response deadline set for December 15, 2026.

Maryland Transportation Authority

POSTED

about 19 hours ago

DEADLINE

in about 2 months

IT Integration and Security ConsultingThis IT Integration and Security Consulting subcontract involves providing specialized security auditing and integration services for prime contractors working on City of Pasadena IT projects. The scope of work focuses on configuring Entra ID for single sign-on and ensuring full compatibility with GCC High environments. Additionally, the consultant is responsible for establishing robust security practices for data storage and transit utilizing SharePoint and Entra ID to deliver a fully secured and authenticated system environment. Managed by the Information Technology Department in California under NAICS code 541519, the project requires the delivery of detailed integration reports. Interested parties must submit their responses by the deadline of December 5, 2026.

Information Technology Department

POSTED

about 20 hours ago

DEADLINE

in about 1 month

Higher Education System Implementation & SupportThe Higher Education System Implementation and Support subcontract involves the rollout, user training, and technical maintenance of an articulation system for prime contractors working on Framingham State University projects. The selected provider will be responsible for developing comprehensive training documentation, conducting instructional sessions for faculty, and offering continuous technical support. A deep understanding of administrative workflows within higher education is required to successfully execute these tasks. Key deliverables for this engagement include the production of user manuals, detailed training records, and the establishment of a support service level agreement. Interested parties should note that the response deadline is December 1, 2026, and the project falls under NAICS code 541519.

Framingham State University

POSTED

about 22 hours ago

DEADLINE

in about 1 month

Managed Security Services and Operational SupportThe Managed Security Services and Operational Support subcontract focuses on the ongoing monitoring, policy management, and maintenance of the Palo Alto Panorama environment for prime contractors working on Massport network security projects. The scope of work includes performing critical software updates, managing security rule sets, and providing high-level Tier 2 and 3 technical support to ensure system stability and security. To maintain operational standards, the contractor is responsible for delivering monthly performance reports and ensuring consistent system uptime. This opportunity is associated with the Massachusetts Port Authority under NAICS code 541519, with a response deadline set for November 6, 2026.

Massachusetts Port Authority - Goods & Services

POSTED

about 22 hours ago

DEADLINE

Network Infrastructure Support ProviderThe Network Infrastructure Support Provider subcontract for BMet College focuses on providing technical support and maintenance for refreshed switch architecture. The selected provider will be responsible for monitoring system health, troubleshooting hardware and software failures, and implementing firmware updates through the use of Remote Monitoring and Management tools. To ensure high standards of service, the contractor must hold HPE Aruba support certifications and adhere to strict SLA compliance regarding guaranteed uptime and response times. This engagement requires the delivery of regular maintenance reports to track system performance and stability. Interested parties should note that the response deadline is November 23, 2026. The project falls under NAICS code 541519 and is designed to support prime contractors managing the college's network infrastructure projects.

POSTED

about 22 hours ago

DEADLINE

Cybersecurity Assessment and Penetration Testing ServicesThis subcontract for Cybersecurity Assessment and Penetration Testing Services supports prime contractors on State of Oregon Enterprise Information Services projects through the Department of Administrative Services. The scope of work involves performing comprehensive cybersecurity assessments and simulated attacks, including vulnerability scans, penetration tests, and Red Team/Blue Team simulations. Technical execution requires the use of industry-standard tools such as Nessus, Burp Suite, and Metasploit to identify and mitigate security risks. Qualified providers must hold professional certifications such as CISSP, CEH, or OSCP. Key deliverables for the engagement include a Cybersecurity Assessment Report, a detailed Vulnerability Matrix, and an Exercise After-Action Report. The work is centered in Salem, Oregon, under NAICS code 541519.

Department of Administrative Services

POSTED

about 23 hours ago

DEADLINE

in about 1 hour

More opportunities from Massachusetts → Executive Office of Education

Same awarding agency

Systems Integration & Data Exchange SpecialistThis subcontract opportunity for a Systems Integration and Data Exchange Specialist supports prime contractors on projects for the Massachusetts Executive Office of Education's Department of Higher Education. The selected provider will be responsible for developing data exchange mechanisms between the portal and various schools, districts, and agencies, while designing an API architecture to facilitate future SMS and email communication services. All work must be performed in accordance with Commonwealth security and privacy policies through the use of integration middleware and API management tools to deliver a fully integrated data exchange system. The project is categorized under NAICS code 541512 and will be performed in Everett, Massachusetts. Interested parties must submit their responses by the deadline of November 13, 2026.

Computer Systems Design Services

POSTED

DEADLINE

Full-Stack Software Development (AI-DLC)This subcontract for the Executive Office of Education in Massachusetts focuses on the full-stack software development of a Student Portal MVP. Utilizing an AI-Driven Development Lifecycle, the project involves creating student experience, operational capabilities, and data exchange modules designed to support a scalable architecture for 80,000 annual users. The final deliverable is the production of working software code. The development process must adhere to the Commonwealth AI Policy and follow NIST and SANS best practices for AI-enabled coding and documentation. The project is categorized under NAICS code 541511, with performance taking place in Everett, Massachusetts. Responses for this opportunity are due by November 13, 2026.

Custom Computer Programming Services

POSTED

DEADLINE

UX/UI Design & Accessibility SpecialistThis subcontract opportunity is for a UX/UI Design and Accessibility Specialist to support prime contractors on Department of Higher Education student portal projects for the Massachusetts Executive Office of Education. The selected provider will be responsible for user-centered design, facilitating requirements discovery, and creating mobile-responsive prototypes for desktops, tablets, and phones. A critical component of the role involves performing accessibility auditing to ensure all deliverables comply with Commonwealth Digital Accessibility Requirements and WCAG standards. The project is based in Everett, Massachusetts, with a response deadline of November 13, 2026.

Graphic Design Services

POSTED

DEADLINE

Student Portal RFQ

Solicitation # BD-27-1036-EDU02-EDU02-134845

The Executive Office of Education for the Commonwealth of Massachusetts is soliciting proposals under solicitation number BD-27-1036-EDU02-EDU02-134845 to design, build, test, deploy, and transition a Student Portal for the Department of Higher Education. The project aims to deliver a Minimum Viable Product (MVP) by June 2027, utilizing an iterative Agile delivery approach and AI-DLC practices. The portal must be scalable to support approximately 80,000 annual graduating students and include critical functional capabilities such as MyMassGov authentication and a Claim My Spot enrollment workflow. The contract is structured as a Firm Fixed Price agreement with a not-to-exceed budget of $650,000. The selected vendor must comply with the Commonwealth AI Policy, digital accessibility requirements, and CORI check mandates. Liability for claims is capped at the greater of $100,000 or two times the total contract value. Evaluation of bidders will be based on the overall quality of responses, mandatory minimum qualifications, and cost competitiveness, with potential for additional points via demonstrations. Proposals must be submitted via the COMMBUYS portal by November 13, 2026, and must include a high-level solution architecture, implementation timeline, and a completed cost workbook. Performance is based in Everett, Massachusetts, and deliverables are subject to a ten-business-day review and acceptance period by the Agency Project Manager.

POSTED

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS