I. DESCRIPTION OF SERVICES
Texas Education Agency requires the services of 1 Network Security Engineer 3, hereafter referred to as Candidate(s), who meets the general qualifications of Network Security Engineer 3, Security and the specifications outlined in this document for the Texas Education Agency.
All work products resulting from the project shall be considered "works made for hire" and are the property of the Texas Education Agency and may include pre-selection requirements that potential Vendors (and their Candidates) submit to and satisfy criminal background checks as authorized by Texas law. Texas Education Agency will pay no fees for interviews or discussions, which occur during the process of selecting a Candidate(s).
This project will optimize the agency s CrowdStrike SIEM and related CrowdStrike services to improve threat detection, monitoring, and response capabilities. The contractor will expand and tune telemetry, integrate additional highvalue log sources, enhance security dashboards, and support the rollout of additional CrowdStrike services. The effort will increase visibility into endpoint and security risk, improve signal quality and correlation, and provide security leadership with clear insight into security operations effectiveness and overall risk posture.
Expected Outcomes:
Expanded and optimized CrowdStrike SIEM telemetry coverage
Integration of additional highvalue log sources
Improved dashboards for operational and executive visibility
Enhanced detection fidelity and monitoring effectiveness
Clearer insight for leadership into endpoint risk and security operations performance
Duties to Be Performed:
Assess current CrowdStrike SIEM configuration, telemetry coverage, and log ingestion
Enable and tune additional CrowdStrike telemetry to improve visibility and signal quality
Identify and integrate new highvalue log sources into CrowdStrike SIEM
Develop and refine security dashboards aligned to SOC and executive use cases
Assist with technical enablement and rollout of additional CrowdStrike services
Validate data quality, parsing, and correlation within the SIEM
Coordinate with Security Operations, IT Operations, and system owners
Identify gaps, risks, and improvement opportunities in monitoring and detection
Provide weekly status updates and monthly executivelevel progress summaries
Deliver supporting documentation and recommendations to sustain improvements
Deliverables:
Summary of work performed and capabilities delivered
Documentation supporting all telemetry enablement, log integrations, and dashboard implementations
Measurable improvements in monitoring, detection, or visibility
Recommendations for future enhancements or next-phase efforts
II. CANDIDATE SKILLS AND QUALIFICATIONS