Managed Security Services and Threat Detection

GSA seeks a comprehensive managed security services provider to deliver round-the-clock threat detection, investigation, and response capabilities. The service encompasses Managed Detection and Response (MDR) with 24/7/365 monitoring, Security Information and Event Management (SIEM) using Splunk with 100GB capacity, and Endpoint Detection and Response (EDR) via CrowdStrike Falcon Mobile covering 1,650 endpoints. The provider must supply three-tier analyst support: Level 1 (alert monitoring and escalation), Level 2 (root cause analysis and remediation), and Level 3 (advanced threat hunting and incident response guidance). Key deliverables include cyber threat intelligence, threat hunting services, cyber maturity assessments, ongoing detection engineering, use case development, incident response support for the first hour, and a dedicated customer success manager. This service enables GSA to proactively identify, investigate, and mitigate threats across its digital environment through advanced detection methods and expert security personnel.