Endpoint Security Event Management

The Defense Information Systems Agency (DISA) is conducting market research to identify sources capable of providing an Endpoint Security Event Management System (ESEMS) for the Project Manager Command & Control Infrastructure (PM C2I) and the Network Enterprise Technology Command (NETCOM). This requirement involves delivering comprehensive cybersecurity solutions, including Endpoint Detection and Response (EDR), Security Information and Event Management (SIEM), and Zero Trust Architecture across the Army's Unified Network. The opportunity record describes a need for integrated technical expertise to support global programs and maintain high-performance infrastructure on both NIPR and SIPR networks. The anticipated procurement is structured as a single-award Indefinite Delivery/Indefinite Quantity (IDIQ) contract with an estimated ceiling of $850 million and a 10-year period of performance. Work will primarily be performed at Fort Huachuca, Arizona, and involves four primary task areas: Endpoint Ecosystem management, Comply-to-Connect (C2C) framework orchestration, Unified SIEM (USIEM) ecosystem maintenance, and the NETCOM Edge collaborative development environment. The attachment states that the government is evaluating the feasibility of a small-business set-aside based on the responses received. Interested parties must submit capability statements by June 29, 2026, at 12:30 PM EDT. The submission requirements and technical specifications are detailed in the attached document, ESEMS_Sources_Sought_15 June 2026.docx, which outlines mandatory criteria such as a Top Secret Facility Clearance and experience with specific technical stacks including Microsoft Defender, Elastic, and Forescout. Submissions must address specific capability questions and demonstrate the abilit…