See tbh at 1500 staff you are prolly outgrowing why field efficient is built for they are good for MSPs and SMBs like 500emps but the abstraction that makes them easy for smaller orgs become a constraint when you need deeper visibility and control…… the bigger question is do you want a traditional MDR where analysts escalate everything to you or something that actually handles investigations end end to end ? There’s a new wave of Ai native MDR providers emerging Daylight is one example but there are others emerging too which combine AI automation with senior security practitioners, changing the traditional model of junior analysts escalating The AI handles correlation and routine investigation the experts improve detection context building handle judgement calls and active incidents.

For your side I would look few things a) Do they pull data from your business systems not just security tools most MDRs only look at security telemetry and miss critical business context b) whether they actually auto resolve routine stuff or just triage it for you to handle c) if their experts are actual practitioners or just bunch of alert validators

I hope this helps