SIEM And SOC Services

The Downtown Development Authority of Ann Arbor, Michigan is seeking a vendor to provide Security Information and Event Management (SIEM) and Security Operations Center (SOC) services. The agency needs to obtain a new security log aggregation tool to collect data from its entire IT environment, including servers, workstations, network equipment, virtual environments, and security tooling. To solve the problem of limited internal resources, the agency requires an external team to assist with monitoring its environment during off-hours. The scope of work covers user and entity behavior analytics to detect insider threats or compromised accounts. The selected system must support Microsoft workstations and servers, Linux hosts, Microsoft 365, Palo Alto Firewalls, Extreme Networking, Nutanix, and Palo Alto Cortex XDR. Additionally, the vendor must participate in monthly touchpoint meetings to ensure smooth operations, focusing on environmental abnormalities and potential optimizations. Eligible bidders must be onshore organizations located in the United States. The agency permits the selected vendor to perform all work offsite. Bidders must submit their proposals digitally via email or through the designated online portal. The agency has not disclosed a specific budget and is looking for cost proposals from bidders. A voluntary pre-bid meeting is scheduled for June 11, 2026. The agency will evaluate proposals based on the submitted bids to select the most suitable partner for these security services.