ITES-11289 - USA (Las Vegas, Nevada) - Cybersecurity Managed Detection and Response Services - Deadline November 19,2026

(1) Vendor needs to provide cybersecurity managed detection and response services to the government authority located in Las Vegas, NV.– Comprehensive managed security services to function as a strategic extension of the Department’s cybersecurity program.– 24x7x365 SOC Support: Continuous automated and analyst–led event monitoring, alert triage, log investigation, event correlation, and formal ticketing/incident classification.–SIEM Management: Hosting, configuration optimization, log onboarding, correlation rule tuning, and ongoing validation across all active log sources. – MDR/EDR/XDR Capabilities: Endpoint behavioural monitoring, lateral movement analysis, malware detection, ransomware containment recommendations, and isolate–readiness validation.– Network Monitoring: Monitoring of firewall threat logs, IDS/IPS, VPNs, remote access Identify & Access Monitoring: Anomalous authentication behaviours (e.g., privilege escalation, MFA bypass attempts, brute force, and impossible travel, etc.), compromised accounts, privileged account misuse, administrative activity.– Threat Detection Coverage: Maintain persistent rules for mapping advanced attack methods, nation–state activity, supply–chain exploits, insider threats, and data exfiltration.– Proactive Threat Hunting: Execute targeted hunts at least monthly based on real–time threat intelligence and specific aviation industry risk profiles.– Tool Optimization: Continuous adjustment of dashboards, platform configurations, custom integrations, and log streaming pipelines across SIEM and EDR suites.– Annual Tabletop Simulations: Plan, coordinate, and execute at least one major mock incident exercise per year. Scenarios must simulate critical risks, such as active airport ransomware, identity platform outages, or an operational technology compromise.(2) All the questions must be submitted no later than November 12, 2026.