RFQ 26-04667 for Security Operations & Splunk Engineering Support

The Executive Office of Technology Services and Security is seeking a Managed Security Service Provider to partner in the operation and maturation of a 24x7x365 Security Operations Center (SOC). The provider will offer comprehensive Splunk Engineering and Support services for the optimization of Splunk Enterprise Security, data onboarding, advanced analytics, and architectural transformation. Key responsibilities include security operations services, Splunk engineering and support, and transition support. The provider must have experience in providing similar services to organizations of comparable size. Some key points to consider: • The provider will supply the resources needed to remotely staff the 24x7x365 Security Operations Center. • The provider must utilize the EOTSS’s Splunk Enterprise Security instance to identify, investigate, and triage security incidents. • The provider will conduct proactive threat hunting using Splunk, specifically targeting adversarial intelligence relevant to State and Local government sectors. • The provider must implement robust quality control measures to review and approve all content generated by the GenAI tool. • The provider will deliver a comprehensive knowledge transfer package at the conclusion of each onboarding or project.