Splunk Security Information and Event Management

The Transportation Security Administration requires Splunk Enterprise and Splunk Enterprise Security software licenses along with accompanying maintenance, support, and professional services to sustain and enhance its Security Information and Event Management system. The acquisition also includes mandatory TrackMe software licenses, which are essential for optimal SIEM functionality and seamless integration with the existing Splunk infrastructure. These components are necessary to accommodate increased daily ingestion rates of security event data, ensuring the system remains properly configured and fully optimized to convert raw security telemetry into actionable cyber threats alerts and support timely incident remediation. The expansion and ongoing development of the SIEM system depend on these licenses to maintain performance, scalability, and operational effectiveness. The contract is forecasted under NAICS code 541519 and is not subject to any set-aside provisions. Performance will be centered in Herndon, Virginia, with primary point of contact Brian Thompson and alternate contact Carlos Vallejo available for inquiries. For small business coordination, Toshia Rollins serves as the designated Small Business Specialist. The solicitation is currently in the forecasting phase, with no formal solicitation number assigned at this time, and all official communications and documentation can be accessed via the published public link.