SOC Monitoring and Vulnerability Management

The SOC Monitoring and Vulnerability Management subcontract, issued by the Department of Homeland Security Air and Marine Contracting Division, focuses on providing continuous security monitoring, vulnerability scanning, and incident response for prime contractors on CBP BPTOC projects. The scope of work includes the integration of SIEM platforms, execution of patch management protocols, and the generation of remediation reports. To ensure compliance, the contractor must adhere to FISMA, RMF, ATO, and ISO 27001 standards, and all assigned personnel must undergo CBP vetting. Key deliverables for this engagement include vulnerability scan reports and Plans of Action and Milestones. The project is categorized under NAICS code 541519 and will be performed in Washington, DC. Interested parties should note the response deadline of October 29, 2026.