CISA Cybersecurity Operations Support Services (COSS)

The Department of Homeland Security (DHS), Cybersecurity and Infrastructure Security Agency (CISA), Office of the Chief Information Officer (OCIO), and the Defensive Cybersecurity Operations (DCO) Subdivision the responsibility to monitor and protect CISA systems from unauthorized access, misconfiguration or disruption of services from internal and external threats. CISA will acquire expert IT Security services for CISA’s DCO mission. This includes leveraging expertise in Security Operations Center (SOC), Vulnerability Management (VAT), Penetration Testing, Security Engineering, Cloud Security, AI Security, Purple Team, and Electronic Discovery. CISA will require a full range of cybersecurity operations and engineering services across of all CISA FISMA systems. CISA will also require skilled personnel, materials, equipment, facilities, travel, and other services required to satisfy DCO’s mission needs. The scope of systems where services will be included are the following environments: • Hybrid cloud systems such as Infrastructure as a Service (IaaS), Software as a Service (SaaS), Platform as a Service (PaaS) and Infrastructure as Code (IaC) • Brick and Mortar Data Centers Environments • End user capabilities • Trusted Internet Connectivity • Remote connectivity and logical cloud technologies • WAN/MAN • Mission, big data and other cybersecurity flows and processing

Estimated value

Over $100M

Award quarter

Q2 2027

Est. solicitation date

Oct 31, 2026

Anticipated award

Jan 2, 2027

Contract vehicle

Alliant 2

Contract type

Labor Hour

Competition

Follow-on to Existing Contract

Status

REC

Fiscal year

2027

Period of performance

Jan 27, 2027 – Jan 26, 2032

• NAICS541330
• PSC541330