Description
The Executive Office of Technology Services and Security is seeking a Managed Security Service Provider to partner in the operation and maturation of a 24x7x365 Security Operations Center (SOC). The provider will supply resources needed to remotely staff the SOC, including 24x7x365 monitoring and response capabilities. The provider will also provide comprehensive Splunk Engineering and Support services for EOTSS, including optimization of Splunk Enterprise Security, data onboarding, advanced analytics, and architectural transformation. Key responsibilities include managed detection and response, incident investigation and escalation, threat hunting, and security operations governance and maturity. The contract is expected to be for an initial 36-month term, with the option to renew or extend.
• The provider will provide 24x7x365 monitoring and response capabilities, seamlessly integrating with the EOTSS' internal SOC team to ensure continuous protection of state assets.
• The provider will supply resources needed to remotely staff the 24x7x365 Security Operations Center, including nights, weekends, and holidays.
• The provider will provide comprehensive Splunk Engineering and Support services, including optimization of Splunk Enterprise Security, data onboarding, advanced analytics, and architectural transformation.
• The provider will deliver a robust threat intelligence capability, including integration with the EOTSS' Splunk instance, intelligence feed management, and reporting.
• The provider will assist with the inventory of critical protected environments and the development of detailed Splunk architecture diagrams in support of defensive and recovery planning activities.