Enterprise Cybersecurity Penetration Testing

Lincoln Electric System is seeking a cybersecurity firm to perform annual external, internal, web application, wireless, social engineering, and physical penetration testing across its information technology environment and facilities.

Lincoln Electric System

General

Status:Open (Unknown)

Solicitation Identifier:125-26

Due Date:Oct 27, 2026 07:00 PM

Posted Date:Oct 08, 2026 09:28 AM

Type:Request for Proposal (RFP)

Level:Local

Ask AI about this solicitation

ChatGPT Claude Perplexity Grok Gemini

Original Solicitation Links

[

125-26

]

RFP - Corporate & Physical Penetration Test

Contact

Name:LES Procurement Department

Email:procurementdept@les.com

Phone:+14024733198

Address:2620 Fairfield Street, Lincoln, NE, USA

Submission Instructions

Method:Online

Portal:https://les.procureware.com/Bids/40b4ec47-8c04-4124-8d2f-56ef626e0692

Description

Lincoln Electric System is seeking an experienced cybersecurity firm to conduct a comprehensive penetration testing assessment of its external and internal information technology environments, two externally hosted web applications, wireless networks, corporate and power-generation facilities, and other network-connected assets. The scope includes open-source intelligence, external and internal network testing, web application testing, wireless testing, social engineering, and external and internal physical penetration testing at a minimum of four facilities. Testing may include credential harvesting, password cracking, privilege escalation, lateral movement, phishing, smishing, badge cloning, tailgating, unauthorized device connections, material-theft simulations, and evaluation of physical security controls. The contractor must provide rules of engagement, detailed encrypted findings and technical reports, proof-of-concept procedures, remediation recommendations, data inventories and deletion evidence, a formal debrief, and validation retesting approximately 60 days after the final report. Proposers must demonstrate at least 10 years of penetration-testing experience, appropriately certified personnel, United States headquarters and operations, and relevant utility, energy, or banking-sector experience. Pricing must be itemized across all testing, reporting, debriefing, retesting, travel, and related services. The proposal package must include the required proposal narrative, pricing form, bid reply/signature form, Equal Employment Opportunity Compliance form, Confidentiality and Security Agreement Form 790, and applicable Foreign Adversary Contracting Prohibition Act certification.

Title	Date Posted
1. 125-26 Instructions to Bidders - Contracts.docx	Oct 08, 2026 01:58 PM
3. 125-26 Price Form.docx	Oct 08, 2026 01:58 PM
6. 125-26 Cyber Attack Pen Test RFP 2026.docx	Oct 08, 2026 01:58 PM
7. 125-26 Form790.pdf	Oct 08, 2026 01:58 PM
2. 125-26 SAMPLE Contracts.docx	Oct 08, 2026 01:58 PM
SUMMARY OF LB1300 AND DRAFT CONTRACT CLAUSE.pdf	Oct 08, 2026 01:58 PM
5. 125-26 EEO Form rev April 2025.pdf	Oct 08, 2026 01:58 PM
4. 125-26 Bid Reply - Signature Form - 2025.docx	Oct 08, 2026 01:58 PM
Certification for Scrutinized Company.pdf	Oct 08, 2026 01:58 PM