Brunswick County Civicplus #188

Brunswick County managed cybersecurity services: SIEM, SOC, MDR, scanning, penetration testing, patching, and documentation

Brunswick County, North Carolina, Information Technology seeks managed cybersecurity services to strengthen County staff’s security operations. - Government buyer - Brunswick County, North Carolina — Information Technology. - Requested services - Managed SIEM: Procure, configure, integrate, and operate a cloud-based SIEM, including alerting, reporting, incident workflows, threat intelligence, dashboards, security architecture workshops, and ongoing tuning. Support 90 days of hot log storage plus 275 days of cold storage, customer log export, centralized authentication with MFA, UEBA, AI/ML analytics, and real-time system health monitoring. - SOC: U.S.-based, 24x7x365 monitoring and response, including event investigation, triage, threat hunting, incident escalation, and compliance and executive reporting. - MDR: 24x7x365 monitoring of the County’s 1,512 SentinelOne endpoints, using Unified Attack Chain monitoring and Unified Kill Chain and MITRE ATT&CK methodologies in coordination with County IT. - Vulnerability scanning: Regular internal scans with findings and remediation recommendations. Qualys is preferred, but an equivalent alternative may be proposed. - External penetration testing: Test 75 publicly available external addresses and provide findings and remediation recommendations. - Patching: Identify and distribute approved updates, with version visibility, automated installation where possible, reporting, audit logs, and rollback capability. Updates require County IT approval. NinjaOne is preferred, but an equivalent alternative may be proposed. - Templates and documentation: Policy development or review, policy-framework templates, knowledgebase articles, procedures, and related documentation; priced by package or hourly rates. - Named OEMs and technologies - SentinelOne — existing EDR/antivirus platform and 1,512 endpoints to support for MDR and integration. - Cisco — existing Cisco Meraki and Cisco Firepower equipment, including three Meraki MX 250 high-availability pairs and Firepower FTD 1150, FTD 1120, and FTD 2100 configurations. - Microsoft — Active Directory, Entra ID, Azure, Microsoft Event Hub, Windows, and Microsoft 365; the County has 1,600 Microsoft 365 users (228 F3, 1,355 G3, and 9 G5). - Qualys — preferred vulnerability-scanning solution; alternatives are allowed. - NinjaOne — preferred patching solution; alternatives are allowed. - Environment and notable requirements - The listed environment includes 1,305 physical desktops, 30 virtual desktops, 12 physical servers, and 165 virtual servers, in addition to the 1,512 SentinelOne endpoints and listed network equipment. - Reporting and compliance support must address IRS 1075, HIPAA, CJIS, NIST, and PCI requirements. - SIEM, SOC, MDR, scanning, penetration testing, patching, and documentation are separately described services; no exclusive OEM is specified. - Term and value - Intended initial term is one year, with two successive one-year renewal options. Renewal is automatic unless either party gives at least 60 days’ notice of non-renewal; pricing is firm for the initial and renewal terms. - No contract value is provided in the available information; the value range below is a planning estimate for the potential three-year scope.

Description

Brunswick County is seeking sealed proposals for managed cybersecurity services to augment its existing IT cybersecurity staff. The requested services include SIEM setup and management, 24x7x365 SOC monitoring and response, managed detection and response, vulnerability scanning, patching, and templates or documentation. Services must be priced separately, and the County may select one or more services for award and implementation. Proposals are due November 27, 2026, at 4:00 PM ET.

View original listing