CISA Cybersecurity Operations Support Services (COSS)
Forecast Recompete Updated
- Solicitation expected
- Estimated value
- $100,000,000
- Set-aside
- No set-aside
Forecast facts
- Incumbent contract
-
- 47QTCK18D0008 Federal IDV award held by Leidos, Inc. Ordering ends Jun 30, 2028 · Ceiling $90,750,000,000
- Previous solicitation
- Alliant 2 Unrestricted GWAC Award Notice · QTA0016JCA0003 · Posted Aug 11, 2017
- Anticipated award
- Through
- Acquisition strategy
- Follow-on to Existing Contract
- NAICS code
- 541330 Engineering Services
- Place of performance
- Arlington, VA
- Forecast number
- F2026074811
- Points of contact
-
- Hannah Moussa cisaapfsvendorinquiries@cisa.dhs.gov (202) 568-4157
Forecast details come from DHS's Acquisition Planning Forecast System. Agencies' dates and values are estimates.
About this forecast
The Cybersecurity and Infrastructure Security Agency (CISA), under the Department of Homeland Security, is recompeting cybersecurity operations support services as a labor-hour contract valued at $100 million, with solicitation release scheduled for October 31, 2026, and award anticipated January 27, 2027. The contract covers Security Operations Center, Vulnerability Management, Penetration Testing, Security Engineering, Cloud Security, AI Security, Purple Team, and Electronic Discovery capabilities to protect CISA FISMA systems including hybrid cloud environments (IaaS, SaaS, PaaS, Infrastructure as Code), data centers, end-user capabilities, Trusted Internet Connectivity, remote connectivity, and WAN/MAN infrastructure from unauthorized access, misconfiguration, and service disruption.
Performance runs from January 27, 2027 through January 26, 2032 in Arlington County, Arlington, Virginia. The contract is structured as a labor-hour engagement under NAICS 541330 (Engineering Services). The Information Technology Contracting Division (70RCSJ) serves as the contracting office; requirements contact Eva Shaw-Taylor is reachable at CISAAPFSVendorInquiries@cisa.dhs.gov or (771) 888-5311, with alternate contact Morgan Skaggs at (202) 880-5629.
This recompete follows the existing GSA Alliant II Government-Wide Acquisition Contract 47QTCK18D0008, awarded to Leidos, Inc. on July 1, 2018, with a $90.75 billion ceiling and ultimate completion date of June 30, 2028. Under this GWAC, Leidos has delivered cybersecurity operations support to CISA through recent task orders totaling $23 million and $19.1 million.
Forecast text
The Department of Homeland Security (DHS), Cybersecurity and Infrastructure Security Agency (CISA), Office of the Chief Information Officer (OCIO), and the Defensive Cybersecurity Operations (DCO) Subdivision the responsibility to monitor and protect CISA systems from unauthorized access, misconfiguration or disruption of services from internal and external threats.
CISA will acquire expert IT Security services for CISA’s DCO mission. This includes leveraging expertise in Security Operations Center (SOC), Vulnerability Management (VAT), Penetration Testing, Security Engineering, Cloud Security, AI Security, Purple Team, and Electronic Discovery.
CISA will require a full range of cybersecurity operations and engineering services across of all CISA FISMA systems. CISA will also require skilled personnel, materials, equipment, facilities, travel, and other services required to satisfy DCO’s mission needs. The scope of systems where services will be included are the following environments:
• Hybrid cloud systems such as Infrastructure as a Service (IaaS), Software as a Service (SaaS), Platform as a Service (PaaS) and Infrastructure as Code (IaC)
• Brick and Mortar Data Centers Environments
• End user capabilities
• Trusted Internet Connectivity
• Remote connectivity and logical cloud technologies
• WAN/MAN
• Mission, big data and other cybersecurity flows and processing
On GovTribe
Work this forecast
- Track it in your pipeline
- Find teaming partners
- Similar forecasts
- Ask GovTribe AI about this forecast