USSF Space Delta 6 – Defensive Cyberspace Operations (DCO) Support Services (D6-DCO)

Background
The USSF SPACE DELTA 6 – DEFENSIVE CYBERSPACE OPERATIONS (DCO) SUPPORT SERVICES (D6-DCO) will support intrusion detection monitoring (IDM) across all Delta 6 Cyber Squadrons and SOC covering Space Deltas 2, 3, 4, 5, 8, and 9 and SLD 30 & 45 space and mission systems. The requirements will support development, improve proficiency, and increase operational effectiveness of Delta 6 personnel. A general summary of these tasks includes employing DCO capabilities, conducting intrusion detection monitoring and analysis, identifying malicious cyber activity, determining attack vectors, executing cyber response activities, developing defensive countermeasures, and providing on-the-job training for Cyber Guardians.

Work Details
The contractor shall provide a wide range of services including participating in the planning process, drafting and validating squadron level DCO Tactics, Techniques, and Procedures (TTPs), conducting analysis on new DCO-Space capability releases, attending meetings at different security levels, providing support for advanced training initiatives, maintaining proficiency by performing DCO crew operation for assigned space and mission systems IAW with CYS policies. The contractor shall also provide expertise in support of continuity of operations (COOP) activities between the primary and back-up locations and relocate to the back-up location as required to conduct DCO activities as part of real-world operations.
Additionally, the contractor shall provide expertise for DCO-Space capabilities such as Security Incident and Event Management (SIEM), Intrusion Detection and Prevention Systems, Endpoint Protection Systems, Security Orchestration, Automation and Response (SOAR), Firewalls, Log Aggregator; Protocol Analyzers; Vulnerability Assessment Tools.
Furthermore, the contractor shall assist in cyber threat emulation services including coordination and planning with red and blue teams to define the scope, objectives, exercise scenario creation once per quarter, assessment execution once per quarter among other tasks.
The contractor shall also assist with system integration services by facilitating test, installation, and integration of new software and hardware systems into the SOC to enhance DCO.
Additionally, the contractor shall assist with data analysis services by analyzing data collected from government systems using software-based analytical tools.
The contractor shall also assist with development services by developing software applications for SOC operational efficiency in performance of DCO mission purposes using commercially available software coding languages and low-no code coding solutions.

Period of Performance
The period of performance is planned to include a three-month phase-in period followed by a one-year base period with a potential 6-month extension of service.

Place of Performance
The place of performance is Schriever SFB (SSFB), Colorado.