Information Technology - Managed Cybersecurity Services

Brunswick County is seeking a qualified vendor to provide a comprehensive suite of managed cybersecurity services to augment its existing IT security staff. The contract will cover the implementation, daily administration, monitoring, and support of a cloud‑based SIEM platform, 24x7x365 Security Operations Center (SOC), Managed Detection & Response (MDR), vulnerability scanning (Qualys preferred), patch management (NinjaOne preferred), and related documentation or template services. The County will award a one‑year initial term with two optional one‑year renewals, and vendors must submit a sealed hard‑copy proposal (including a USB copy) by 4:00 PM ET on 27 Nov 2026. Key deliverables include SIEM setup and tuning, continuous SOC monitoring, incident response, regular compliance reporting (IRS 1075, HIPAA, CJIS, NIST, PCI), vulnerability assessments, external penetration testing, and patch deployment across approximately 1,500 endpoints, 1,300 desktops, 180 servers, and multiple firewalls. • Scope includes SIEM (cloud‑based, 90 days hot + 275 days cold storage), SOC (24x7 US‑based), MDR, Qualys vulnerability scanning, NinjaOne patching, and documentation services. • Required integrations: SentinelOne EDR, Meraki and Cisco firewalls, Azure, Microsoft 365, Active Directory/Entra ID, and various on‑prem and cloud assets. • Proposal must include detailed technical approach, staffing plan, cost breakdown (one‑time and recurring), references, certifications, and insurance. • Contract value is not disclosed; the County expects firm pricing for the initial year and any renewal periods.