SIEM And SOC Services

The Downtown Development Authority of Ann Arbor, Michigan is seeking a vendor to provide Security Information and Event Management (SIEM) and Security Operations Center (SOC) services. The agency needs to obtain a new security log aggregation tool to collect data from its entire IT environment, including servers, workstations, network equipment, virtual environments, and security tooling. To solve the problem of limited internal resources, the agency requires an external team to assist with monitoring the environment during off-hours. The scope of work covers the implementation of User and Entity Behavior Analytics to detect insider threats or compromised accounts. The selected vendor must support an environment consisting of Microsoft workstations and servers, Linux hosts, Microsoft 365, Palo Alto Firewalls, Extreme Networking, Nutanix, and Palo Alto Cortex XDR. Additionally, the agency requires a monthly touchpoint meeting to ensure smooth operations, focus on abnormalities, and identify environmental optimizations. Only organizations based onshore in the United States are eligible to bid on this opportunity. The agency allows the performance of all contracted work to be conducted offsite. Bidders must submit their proposals digitally, with the agency accepting submissions via email or through their online portal. The agency has not disclosed a specific budget and is looking for cost proposals from bidders. A voluntary pre-bid meeting is scheduled for June 11, 2026, to address questions regarding the procurement. The agency will evaluate proposals based on the submitted responses, though specific weighted evaluation criteria are not detailed in the initial announcement.