GovSprint
← Back to today

Malware Analysis Support Services

Department of Homeland Security · Cybersecurity and Infrastructure Security Agency · Cyber Contracting Division (70RCSJ)
Account requiredWhy it scored this way

Every reason behind the verdict rather than the headline one — which of your certifications match, how much runway is left, whether the work is your size, and what we would need to know to sharpen it.

Forecast detail

Not yet solicited

The expected date passed 111 days ago. It may already be on the street — check SAM.gov before doing anything else.

Solicitation expected
May 1, 2026
Anticipated award
September 1, 2026 · Q4 2026
Estimated value
$10M to $20M
Period of performance
September 30, 2026 to September 29, 2028
Contract type
Labor Hour
Expected vehicle
GSA Schedule
Competition
No Longer Required

Who to talk to

At the forecast stage there is no active procurement, so contact is welcome rather than restricted — this is the one window where a direct conversation is straightforwardly appropriate.

The Small Business Specialist is usually the better first call. Helping firms like yours find and compete for this work is their actual job, and they can tell you whether a set-aside is still under consideration.

Published by the agency in its acquisition forecast, last updated February 12, 2026. Forecast entries are plans, not commitments — dates slip and requirements get cancelled, restructured or absorbed into another buy.

Requirement details

Solicitation number
*F2025069864
Notice type
Forecast
NAICS
541519Other Computer Related Services
Set-aside
Unrestricted
Posted
2026-02-12
Place of performance
Arlington, VA

Market intelligence

Account requiredWho wins this work, and what it pays

Comparable awards under NAICS 541519 at this agency — the incumbent, what they were paid, when their period of performance ends, and the real pricing distribution rather than the headline number. From public federal award records.

Statement of work, as posted

**The requirement is no longer planned." COCO intends to issue the RFQ under the GSA MAS SIN 54151HACS Cyber Hunt and Incident Response Subgroups in accordance with FAR Subpart 8.404 and FAR 8.405-2(c)(3)(iii)(B). The Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA), Cybersecurity Division (CSD) Threat Hunting (TH) subdivision is seeking malware analysis subject matter expertise to support Threat Hunting’s Code and Media Analysis (CMA) Section. Malware analyst support personnel shall support CMA in providing forensic analysis and reverse engineering of malware in direct support of active Incident Response (IR) Branch engagements and Threat Hunting (TH) and Cybersecurity Division (CSD) priorities. The Contractor shall, under government supervision, assist in the evaluation and analysis of complex malicious code through the utilization of government provided tools. Support personnel shall be responsible for providing findings in technical reports with details of the malware, identification parameters, advanced capabilities, and mitigation strategies. Support shall also entail conducting research in the area of malicious software, vulnerabilities, and exploitation tactics.

Contact

Point of contact
Hannah Moussa
Role
Requirements owner
Email
cisaapfsvendorinquiries@cisa.dhs.gov
Secondary
cisaapfsvendorinquiries@cisa.dhs.gov
Introduce your firm

A short introduction against this specific requirement, sent while the agency is still deciding how to buy it.

Open email
Ask about the acquisition strategy

Ask whether a set-aside is being considered, which vehicle is planned, and whether the agency wants industry input. This is the question that can still change the outcome.

Open email
Ask to be notified on release

Ask to be added to any industry-day or notification list so you are not relying on catching the posting yourself.

Open email

Opens in your own mail client, addressed and with a subject line — you write the message. GovSprint never sends anything on your behalf.

Emails open in your mail client and are sent from your address, so the reply comes back to you and the exchange stays yours. Confirm the correct channel and any question deadline on the notice before sending — many solicitations require questions in a specific way.