CISA Cybersecurity Operations Support Services (COSS)

Department of Homeland Security · Cybersecurity and Infrastructure Security Agency · Information Technology Contracting Division (70RCSJ)

Account requiredWhy it scored this way

Every reason behind the verdict rather than the headline one — which of your certifications match, how much runway is left, whether the work is your size, and what we would need to know to sharpen it.

Start free for 14 days Sign in

Forecast detail

Not yet solicited

About 14 days until the solicitation is expected. The window to influence the requirement is nearly shut, but there is still time to introduce yourself and get on the interested-vendor list.

Solicitation expected: October 31, 2026
Anticipated award: January 2, 2027 · Q2 2027
Estimated value: Over $100M
Period of performance: January 27, 2027 to January 26, 2032
Contract type: Labor Hour
Expected vehicle: Alliant 2
Competition: Follow-on to Existing Contract

Incumbent: Leidos · 47QTCK18D0008 / 70RCSJ26FR0000006
This is a recompete. The agency has named who holds the work today, which tells you what you are displacing and what to ask about.

Who to talk to

At the forecast stage there is no active procurement, so contact is welcome rather than restricted — this is the one window where a direct conversation is straightforwardly appropriate.

Requirements ownerEva Shaw-TaylorCISAAPFSVendorInquiries@cisa.dhs.gov
Small Business SpecialistMelody Hinklemelody.hinkle@cisa.dhs.gov · (202) 812-0440

The Small Business Specialist is usually the better first call. Helping firms like yours find and compete for this work is their actual job, and they can tell you whether a set-aside is still under consideration.

Published by the agency in its acquisition forecast, last updated August 26, 2026. Forecast entries are plans, not commitments — dates slip and requirements get cancelled, restructured or absorbed into another buy.

Requirement details

Solicitation number: F2026074811
Notice type: Forecast
NAICS: 541330 — Engineering Services
Set-aside: Unrestricted
Posted: 2026-08-26
Place of performance: Arlington, VA

Market intelligence

Account requiredWho wins this work, and what it pays

Comparable awards under NAICS 541330 at this agency — the incumbent, what they were paid, when their period of performance ends, and the real pricing distribution rather than the headline number. From public federal award records.

Start free for 14 days Sign in

Statement of work, as posted

The Department of Homeland Security (DHS), Cybersecurity and Infrastructure Security Agency (CISA), Office of the Chief Information Officer (OCIO), and the Defensive Cybersecurity Operations (DCO) Subdivision the responsibility to monitor and protect CISA systems from unauthorized access, misconfiguration or disruption of services from internal and external threats. CISA will acquire expert IT Security services for CISA’s DCO mission. This includes leveraging expertise in Security Operations Center (SOC), Vulnerability Management (VAT), Penetration Testing, Security Engineering, Cloud Security, AI Security, Purple Team, and Electronic Discovery. CISA will require a full range of cybersecurity operations and engineering services across of all CISA FISMA systems. CISA will also require skilled personnel, materials, equipment, facilities, travel, and other services required to satisfy DCO’s mission needs. The scope of systems where services will be included are the following environments: • Hybrid cloud systems such as Infrastructure as a Service (IaaS), Software as a Service (SaaS), Platform as a Service (PaaS) and Infrastructure as Code (IaC) • Brick and Mortar Data Centers Environments • End user capabilities • Trusted Internet Connectivity • Remote connectivity and logical cloud technologies • WAN/MAN • Mission, big data and other cybersecurity flows and processing

Contact

Point of contact: Eva Shaw-Taylor
Role: Requirements owner
Email: CISAAPFSVendorInquiries@cisa.dhs.gov
Secondary: CISAAPFSVendorInquiries@cisa.dhs.gov

Introduce your firm

A short introduction against this specific requirement, sent while the agency is still deciding how to buy it.

Open email

Ask about the acquisition strategy

Ask whether a set-aside is being considered, which vehicle is planned, and whether the agency wants industry input. This is the question that can still change the outcome.

Open email

Ask to be notified on release

Ask to be added to any industry-day or notification list so you are not relying on catching the posting yourself.

Open email

Opens in your own mail client, addressed and with a subject line — you write the message. GovSprint never sends anything on your behalf.

Emails open in your mail client and are sent from your address, so the reply comes back to you and the exchange stays yours. Confirm the correct channel and any question deadline on the notice before sending — many solicitations require questions in a specific way.

View in the DHS forecast