Description
The Commonwealth of Massachusetts is soliciting proposals for a Managed Security Service Provider to partner in the operation and maturation of a 24x7x365 Security Operations Center (SOC). This is a hybrid staffing model where the Provider provides coverage during nights, weekends, and holidays, while also acting as a strategic consultant to improve operational maturity. The Provider shall also provide comprehensive Splunk Engineering and Support services for EOTSS. Key services include security incident triage, threat intelligence, and Splunk engineering. The contract is expected to be for an initial 36-month term, with the option for renewal or extension.
• Security Operations Services: 24x7x365 monitoring and response capabilities, seamlessly integrating with the EOTSS’ internal SOC team
• Splunk Engineering and Support: optimization of Splunk Enterprise Security, data onboarding, advanced analytics, and architectural transformation
• Transition Support: governance services related to the transition, including identity/access provisioning, SIEM health assessment, and runbooks for top alerts and IR escalation matrix