Cybersecurity Management Services

The Defense Information Systems Agency (DISA) is conducting market research for comprehensive Cybersecurity Management Services to support its J-9 Hosting and Compute (J-9 HaC) Cybersecurity Division across multiple locations including Oklahoma City, OK; Mechanicsburg, PA; Montgomery, AL; San Antonio, TX; and Ogden, UT. The services encompass 19 task areas including cyber automation, endpoint protection, vulnerability analysis, incident response, strategic partner integration, compliance monitoring, vulnerability management, configuration management, authorization and risk management, and network defense operations. Contractors must possess a Secret facility clearance and provide personnel with Secret security clearances, bachelor's degrees, current 8570/8140 certifications, and extensive cybersecurity experience to work on both NIPRNet and SIPRNet environments. The requirement includes supporting DoD Risk Management Framework (RMF) and FISMA compliance activities, threat detection and monitoring, and comprehensive cybersecurity capabilities across classified and unclassified networks. Interested parties must submit a five-page capabilities statement by September 24, 2025, to demonstrate their qualifications and experience in the specified cybersecurity domains.

This opportunity is designated as a Total Small Business set-aside under NAICS code 541512 with a $34 million size standard, welcoming participation from Small Disadvantaged Businesses, 8(a), Service-Disabled Veteran-Owned, HUBZone, and Woman-Owned Small Businesses. The current incumbent contractor is Cinteot, Inc., a small business that has been providing these services to DISA. The anticipated contract structure includes a firm-fixed price, one-year base contract with three one-year option periods, totaling a potential four-year performance period beginning October 1, 2026. The contract will require personnel to work primarily at DISA facilities across the five specified locations, supporting the agency's Cyber Services Line of Business operations. The comprehensive scope of work spans cybersecurity management support activities that are critical to DISA's mission of providing secure information technology services to the Department of Defense and other government agencies.