Cyber Security Engineer SME.

*** This position is contingent upon contract award ***

Overview

SOSI is seeking a Senior Cybersecurity Engineer to serve as a technical subject matter expert supporting an enterprise cyber defense program for a federal customer. This senior, highly visible role sits at the intersection of security engineering, architecture, and operations. It shapes how the customer evaluates, integrates, and matures its defensive capabilities. The ideal candidate combines hands-on engineering depth with the judgment to advise government stakeholders on emerging threats and technologies. This position is located in the Washington, DC metropolitan area and requires the ability to obtain a Secret clearance.

Job Description

The Senior Cybersecurity Engineer serves as a trusted technical advisor across a broad defensive cybersecurity portfolio. In this role, you will assess the customer’s security architecture, identify gaps, and design practical solutions that strengthen detection, response, and protection across on-premises, cloud, and mobile environments. You will lead technical evaluations and proofs of concept for new security technologies and translate findings into clear recommendations for leadership.

You will work closely with security operations, engineering, and system owner teams. Together, you will turn operational needs into defined security requirements and controls, help integrate security into development and deployment pipelines. The role also supports the customer’s adoption of emerging technology areas, including AI-enabled capabilities and cryptographic modernization. Success in this position requires technical breadth, sound engineering judgment, and the ability to communicate complex security concepts to both technical and non-technical audiences.

Responsibilities

• Serve as a senior technical advisor on enterprise security architecture, engineering, and defensive operations
• Conduct security architecture reviews, identify gaps, and develop risk management recommendations
• Translate operational and mission requirements into security requirements, control baselines, and concepts of operation
• Plan, integrate, and tune security tooling across monitoring, detection, automation, and threat intelligence platforms
• Lead market research, technical evaluations, and proofs of concept for emerging cybersecurity technologies
• Support the security of cloud environments (IaaS, PaaS, SaaS) and integrate security practices into DevSecOps pipelines
• Provide security engineering support for identity, authentication, and mobile security initiatives
• Support cryptographic modernization efforts, including discovery, inventory, and planning for next-generation encryption standards
• Advise on the secure adoption of AI and generative AI technologies
• Apply incident response methods and support complex investigations as a technical escalation resource
• Develop scripts and automation to improve efficiency in security engineering and operations tasks
• Produce clear technical documentation, briefings, and recommendations for government and program leadership
• Mentor team members and contribute to continuous improvement of engineering processes

• Experience:

Five (5) years security-related experience

• Required:
  • Experience implementing tools and processes to support comprehensive offensive and defensive cybersecurity solutions to identify, detect and mitigate sophisticated cybersecurity threats
  • Experience with incident response methodologies, categories and timelines, cyber defense policies and procedures and the ability to perform damage assessments determine remediation paths
  • Experience in intrusion and threat detection methodologies for cloud, host, network and mobile environments
  • Experience in the use and tuning of security event correlation tools
  • Understanding of attack classes, attack stages and adversary behaviors
  • Knowledge of MITRE ATT&CK and D3FEND frameworks and the ability to map those to enterprise cybersecurity tool implementations and investments
• Desired:
  • Experience with digital media analysis and digital forensics
  • Experience conducting static and dynamic analysis (sandboxing, reverse engineering) of malicious binaries to understand adversary TTPs, identify C2 infrastructure and extract IOCs
  • Experience correlating forensic findings with SOC alerts, threat intelligence, and adversary TTPs
  • Knowledge of network security architecture, topology and communication principles
  • Understanding of network protocols (TCP/IP, DHCP, DNS, directory services)
  • Understanding of clous service models and their impact on incident response capabilities
  • Knowledge of system administration, OS hardening and application security threats

• Education: Bachelor’s Degree
• Certifications: Any 1 of: CISSP (associate), CCSP, SSCP, GMON, GCIH, GCIA, or equivalent GIAC certification, CEH, CASP AND any 1 from the CSSP Analyst, Infrastructure Support, or IR from the DOD 8140 list (or other similar certifications as approved by Government)
• Clearance/Suitability: Secret (active); Top Secret, SCI Clearance (eligible)

Work Environment

• Normal office conditions with potential to perform duties in deployed locations.
• Core hours of operation are Monday through Friday, 0600 – 1700.
• May be requested to work evenings and weekends to meet program and contract needs.

Working at SOSi

All interested individuals will receive consideration and will not be discriminated against for any reason.