Security Operations Centre (SOC)

Tender description

The contract for our co-sourced Security Operations Centre (SOC) provision is due to expire at the end of January 2026 and we are looking to enhance and improve our SOC capability with a security partner. The University has an experienced and mature in-house security operations team, including analysts and security engineers. We are looking to establish a partnership with a third party to run 24/7 SOC services as a co-source with the university’s internal team who operate during the working day, 9-5 (excluding weekends and bank holidays). At a high level, this includes the following:<br />• Threat Identification (Threat Intelligence)<br />• Exposure and Validation (Identify, Assess, Test)<br />• Monitoring and Detection (Detection Stack Operations)<br />• Response (Investigation and Hunting)<br />• Response (Containment and Forensics)<br />• Expanded SOC Operations<br />