Cyber Security Operations Support (Recompete)
Past Recompete Updated
- Agency
-
Customs and Border Protection
Department of Homeland Security
- Solicitation expected
- Estimated value
- $100,000,000
- Set-aside
- No set-aside
Forecast facts
- Anticipated award
- Through
- Acquisition strategy
- Follow-on to Existing Contract
- NAICS code
- 541519 Other Computer Related Services
- Place of performance
- Ashburn, VA
- Forecast number
- F2025070806
Forecast details come from DHS's Acquisition Planning Forecast System. Agencies' dates and values are estimates.
About this forecast
The Department of Homeland Security Customs and Border Protection is recompeting Cyber Security Operations Support as a follow-on under the Alliant 2 contract vehicle, with solicitation release estimated for March 1, 2026, and award anticipated for September 24, 2026. The contractor will transition CBP's Security Operations Center to an improved state aligned with Executive Order 13800, focusing on reducing mean time to detect, improving incident recovery, and establishing applicable metrics, and must demonstrate proficiency with cloud-based security technologies and the ability to monitor and analyze machine-generated big data across CBP's enterprise-wide information systems.
The estimated award value is $100 million for a five-year period of performance from September 24, 2026, through September 23, 2031, with work performed in Ashburn, Virginia. John Marschall, Contracting Officer, is reachable at john.d.marschall@cbp.dhs.gov or (202) 344-1116, and Demetrius Smith, Technical Subject Matter Advisor, is reachable at demetrius.smith@cbp.dhs.gov or (317) 641-4591.
Forecast text
The Cyber Security Directorate (CSD) was established to provide security risk management strategies, consistent with the overall strategic goals and objectives of the Department of Homeland Security (DHS) in carrying out its missions that are applied in a consistent manner across CBP. CSD develops and oversees the strategies designed to preserve the confidentiality, integrity, and availability of the information being processed, stored, or transmitted by CBP systems across the full range of threats.
The CBP Security Operations Center (SOC) was established in accordance with the Federal Information Security Management Act (FISMA) and the Homeland Security Presidential Directive (HSPD) 7 as a single point of management and reporting for information security incidents for CBP. The CBP SOC is chartered to prevent, identify, contain, and eradicate cyber threats to CBP networks through monitoring, intrusion detection, and protective security services to CBP information systems, including local area networks / wide area networks (LAN / WAN), commercial Internet connection, public facing websites, wireless, mobile / cellular, cloud, security devices, servers, and workstations. The CBP SOC is responsible for the overall security of CBP Enterprise-wide information systems and collects, investigates, and reports any suspected and confirmed security violations.
CSD requires a knowledgeable, experienced, and innovative Contractor to transition security operations from its current state to an improved state that aligns with the framework of Strengthening the Cybersecurity of Federal Networks and Critical Infrastructure, Executive Order (EO) 13800. This includes reducing meantime to detect, incident recovery, and establish applicable metrics. This Contractor shall have a strong understanding and be proficient with cloud- based security technologies, architecture, and computing and searching, monitoring, and analyzing machine-generated big data.
On GovTribe
Work this forecast
- Track it in your pipeline
- Find teaming partners
- Similar forecasts
- Ask GovTribe AI about this forecast