Cyber Security Operations Support (Recompete)

Requirement

The Cyber Security Directorate (CSD) was established to provide security risk management strategies, consistent with the overall strategic goals and objectives of the Department of Homeland Security (DHS) in carrying out its missions that are applied in a consistent manner across CBP. CSD develops and oversees the strategies designed to preserve the confidentiality, integrity, and availability of the information being processed, stored, or transmitted by CBP systems across the full range of threats. The CBP Security Operations Center (SOC) was established in accordance with the Federal Information Security Management Act (FISMA) and the Homeland Security Presidential Directive (HSPD) 7 as a single point of management and reporting for information security incidents for CBP. The CBP SOC is chartered to prevent, identify, contain, and eradicate cyber threats to CBP networks through monitoring, intrusion detection, and protective security services to CBP information systems, including local area networks / wide area networks (LAN / WAN), commercial Internet connection, public facing websites, wireless, mobile / cellular, cloud, security devices, servers, and workstations. The CBP SOC is responsible for the overall security of CBP Enterprise-wide information systems and collects, investigates, and reports any suspected and confirmed security violations. CSD requires a knowledgeable, experienced, and innovative Contractor to transition security operations from its current state to an improved state that aligns with the framework of Strengthening the Cybersecurity of Federal Networks and Critical Infrastructure, Executive Order (EO) 13800. This includes reducing meantime to detect, incident recovery, and establish applicable metrics. This Contractor shall have a strong understanding and be proficient with cloud- based security technologies, architecture, and computing and searching, monitoring, and analyzing machine-generated big data.