This role is tied to a public-sector opportunity with a defined submission deadline. Open the role details to review project status, client/source context, responsibilities, evidence requirements, application steps, and the FuntoNetwork public links before applying. The full role page includes the structured role snapshot and current RFP status context.

Role Snapshot

Project Status: 🟢 Green - Open - Apply by October 30, 2026

Deadline for Submission: October 30, 2026 at 6:00 PM Eastern Time.

Project Reference: 2ePzWjiCstwye4F6DKEX

Client / Source: District of Columbia Housing Finance Agency

Type: Subcontractor vendor / firm opportunity for an upcoming project

Pricing: Submit a firm quote for the proposed scope and workshare, including currency, pricing basis, assumptions, and expenses. Commercial terms are subject to written agreement and project award.

Location: Client location and remote delivery as required by the verified solicitation

About FuntoNetwork

At FuntoNetwork, we connect experienced consultants with upcoming project opportunities through a mobile-first platform built for discovery, review, application submission, payment tracking, and consultant support.

The Opportunity

FuntoNetwork is seeking a qualified subcontractor vendor or firm for an upcoming project: IT Penetration Testing Services. The selected firm must provide the organizational capability, personnel, evidence, pricing, and delivery controls needed to support this project.

Core Responsibilities

• Provide the firm’s authorized penetration-testing team for the agreed assessment scope.
• Document the permitted DC government systems test conditions and stopping rules.
• Identify exposed DC government systems services or application functions within the agreed scope.
• Assess potential DC government systems vulnerabilities using the permitted methods.
• Validate suspected DC government systems vulnerabilities with reproducible evidence.
• Attempt exploitation only where expressly authorized for DC government systems.
• Assess the impact of confirmed DC government systems weaknesses.
• Prepare remediation advice for the DC government systems findings.
• Retest corrected DC government systems weaknesses within the authorized scope.
• Report DC government systems coverage, findings and testing limitations.

Firm Capabilities / Eligibility & Client Compliance

• Eligibility owner: an authorized business representative who can bind the subcontractor, answer buyer due-diligence questions, and confirm availability for IT Penetration Testing Services.
• Client compliance focus: cybersecurity, privacy, implementation controls, incident-response cooperation, data handling, and evidence that the proposed platform or service satisfies the solicitation.
• License/certification evidence: reseller or manufacturer authorization when a named product is required; relevant security credentials such as CISSP, CISM, CISA, Security+, GIAC, SOC 2, ISO 27001, NIST, CIS, or CJIS evidence when applicable to the work.
• Past performance: comparable public-sector, commercial, regulated-industry, or project-specific references with contact names, dates, scope, value, and outcome.
• Delivery package: key personnel, staffing plan, implementation schedule, pricing input, assumptions, exclusions, subcontract terms, and required forms before FuntoNetwork commits the role to a prime response.

• Provide your firm's legal name, authorized representative, capability statement, comparable project references, and proposed delivery team.
• Confirm staffing capacity, availability, proposed workshare, delivery approach, dependencies, and exclusions for this project.
• Provide applicable client-required licenses, certifications, insurance, security, and compliance evidence; identify any pending requirements.
• Submit an itemized quote with currency, pricing basis (hourly, fixed fee, or milestone), assumptions, expenses, taxes, and support terms.

How to Apply

Apply as an authorized representative of your firm, not as an individual consultant. Submit your firm's project-specific capability statement and the evidence requested above, including applicable licenses, insurance, references, staffing and delivery capacity, proposed workshare, and itemized pricing. Enter your firm's proposed rate in the FuntoNetwork app if the application workflow requests it. FuntoNetwork will assess your organization's eligibility, capacity, compliance, proposed workshare, and commercial terms before deciding whether to include the firm in a client response. Applying does not create a subcontract or authorize work; any engagement is subject to client approval and project award.

RFP Status & Award Center

View project status and award information

FuntoNetwork Hiring Process

View the FuntoNetwork hiring process

FuntoNetwork App

Open the FuntoNetwork App Store listing

Optional Self-Interview for This Role

An authorized proposed lead may request an optional self-interview. It does not guarantee selection or project award.

Request an optional self-interview