City of Philadelphia Department of Aviation

The buyer is seeking a qualified Managed Security Operations Center vendor to provide 365/24/7 proactive and reactive Security Operations Center services. The vendor will assist the Information Security Team in reviewing alerts, tracking incidents, and analyzing user reported issues. The scope includes threat hunting, incident response, SIEM and EDR management, and supporting NIST 800-53 security controls implementation. The buyer requires vendors to have minimum 5 years experience with large government organizations.

• 2/13/2025 - Pre-Proposal Meeting
• 2/18/2025 - Deadline for Questions
• 2/26/2025 - Response to Questions Posted
• 3/10/2025 - Proposal Due Date
• 4/30/2025 - Notice of Intent to Contract
• 7/1/2025 - Project Start

• Minimum 5 years of experience with large government organizations
• ISO9001 certified for Quality Management
• ISO27001 certified for Information Security
• SOC 2 Type II certified
• Staff certifications including CISSP, CISM, CEH, GCIH, and GSEC

• Provide 365/24/7 proactive and reactive Security Operations Center services
• Review daily alerts, track security incidents, and analyze user reported issues
• Conduct Tier 1 threat hunting and assist during incident response
• Provide maturation and co-management of Aviation's SIEM and EDR
• Support implementation and execution of NIST 800-53 security controls
• Develop and approve a comprehensive incident response plan
• Provide monthly briefing sessions on occurrences, trends, metrics, and discoveries
• Establish regular reporting and performance review schedule
• Implement process for continuous improvement and optimization of services
• Provide recommendations for security enhancements based on metrics and best practices