Managed SOC Services for PSO IT Infrastructure

Pakistan State Oil Company Limited (PSO) Karachi is procuring Managed Security Operations Center (SOC) services for its IT infrastructure. This tender invites qualified vendors to provide hybrid SOC services combining on-site and remote monitoring, threat detection, incident response, and SIEM management for a period of one year. The scope includes 24x7 monitoring, alerts triage, escalation, threat hunting, and integration of global threat feeds. Vendors must have two SOC facilities within Pakistan and experience serving large-scale banks or organizations. The technical scope covers continuous logs and events monitoring, incident classification, containment guidance, and SLA-driven response timelines. The vendor will optimize SIEM platforms, develop use cases based on international frameworks like MITRE ATT&CK, and provide weekly and monthly reports with KPI dashboards. The SOC team includes L1, L2, and L3 analysts with defined operational hours and responsibilities. The vendor must also conduct a GAP assessment and maturity evaluation to achieve at least Level 3 SOC maturity. Eligibility requires relevant experience in multiple SIEM deployments, capability to provide local support and software maintenance, and a strong understanding of cyber threat intelligence. Vendors should be registered with FBR and have a valid ATL status. The tender emphasizes uninterrupted service during public holidays and requires a comprehensive SOC governance program. The tender was published on 30th April 2026, with a submission deadline on 19th May 2026. Bidders must submit their quotations to PSO House, Khayaban-e-Iqbal, Clifton, Karachi. Earnest Money and CDR requirements apply as per PSO rules. A practical tip for bidders is to ensure their technical bid clearly demonstrates their SOC maturity level and experience with SIEM optimization to meet PSO's stringent SLA requirements, as this will be critical during technical evaluation.