Secure Software Development & Penetration Testing Support

The contract requires comprehensive third-party security assurance services for all RT-MPEDS components, focusing on validation of the Secure Software Development Lifecycle, execution of penetration testing, and support for remediation of identified vulnerabilities. The work demands expert technical capabilities to ensure robust security posture across the entire system, with an emphasis on identifying and mitigating threats through structured, repeatable processes aligned with industry best practices. The scope is narrowly defined to cover specific components under the RT-MPEDS framework, necessitating precision and deep technical familiarity with the underlying architecture. This is a subcontract under the Bureau of Industry and Security, part of the Department of Commerce, with a North American Industry Classification System code of 541690, indicating it falls under other professional, scientific, and technical services. The solicitation was posted on July 8, 2026, and responses are due by July 28, 2026, with no specific place of performance or set-aside designation provided. The contract does not include a point of contact or detailed address information, and while the exact location of performance is unspecified, the deliverables must meet the security standards dictated by the federal agency overseeing RT-MPEDS systems.