ServiceNow Security Incident Response (SIR) Module Implementation

The contract seeks implementation of the ServiceNow Security Incident Response (SIR) module to enhance the detection, triage, escalation, and resolution of security incidents across the organization’s infrastructure. This project requires seamless integration with existing SIEM tools and alignment with SOC operational workflows to ensure real-time threat response, automated incident handling, and improved visibility into security events. The solution must support scalable incident management workflows, enable role-based access controls, and facilitate audit-ready documentation throughout the incident lifecycle. The work is structured as a subcontract under the SBA set-aside program, targeting small business participation, with a NAICS code of 541511 reflecting IT consulting and related services. The opportunity was posted on July 28, 2026, with a response deadline of August 11, 2026, and is managed by the National Energy Technology Lab under the Department of Energy. While specific performance location details are not provided, the implementation must meet federal cybersecurity standards and support the lab’s mission-critical environments. Contractors are expected to deliver a fully functional, tested, and documented SIR system aligned with institutional operational requirements and integration protocols.