Cyber Engineer-Virginia Beach, VA

iSenpai•Virginia Beach, VA

21h•Onsite

About The Position

iSenpai is seeking a Senior Cybersecurity Engineer to provide technical leadership, security engineering, and consulting expertise to modernize and enhance a fully operational Security Operations Center (SOC). The engineer will assess current cybersecurity capabilities, identify technology gaps and investment opportunities, and develop recommendations and implementation strategies to improve SOC effectiveness. A primary focus is evaluating, integrating, and optimizing endpoint security technologies and defensive artificial intelligence (AI) to improve threat detection, investigation, automation, and response. The role involves architecting and implementing advanced security solutions, integrating enterprise technologies, and maximizing the value of existing and future investments. The engineer will drive continuous SOC improvement through security innovation, detection engineering, threat hunting, incident response, and adoption of emerging defensive capabilities. The position is based 100% onsite at the customer location in Virginia Beach, Virginia, and requires an active SECRET clearance with TS/SCI eligibility. Flexibility to meet threat scenarios 24/7/365 as mission dictates is required.

Requirements

Bachelor's degree in Cybersecurity or a related field.
Active SECRET clearance with TS/SCI eligibility.
Meet CSWF requirements for CNDSP Level III and maintain compliance with DoDD 8140.01 Cyber Workforce requirements for CNDSP Level III roles.
8+ years of experience working with Linux-based networks and systems, with strong network and system-hardening skills.
6+ years of experience in security architecture and installing, configuring, and maintaining data-ingestion pipelines such as Splunk or Elastic.
4+ years of project management or consulting experience working with cross-functional engineering teams and/or developers.
4+ years of experience with EDR/XDR, SIEM, and cloud-native security tools.
3+ years of senior engineer experience for a SOC or a similar technical leadership role.
2+ years of experience with defensive AI/ML focused on real-world CND and SOAR applications.
Extensive knowledge and/or experience with SOC processes such as SIEM optimization, threat hunting, and RMF.
Strong interpersonal skills and the ability to communicate technical concepts to technical and non-technical stakeholders.
Flexibility to meet any threat scenario 24/7/365 as mission dictates.

Nice To Haves

Operational experience.
Certified Splunk Architect and/or Elastic/OpenSearch Engineer certification.
CISSP, Security X, or relevant GIAC certifications, such as GCSA, GDSA, GDAP, or GCIP.
Experience with Microsoft Azure, Intune, Defender Endpoint Security, and Active Directory.

Responsibilities

Integrate SIEM, SOAR, EDR/XDR, identity and access management security, network defense, and hybrid security platforms into a cohesive SOC architecture.
Engineer solutions within existing enterprise environments, manage technical dependencies, integrate shared services, and balance security requirements with operational constraints.
Apply AI and machine learning to defensive cybersecurity, including AI-enabled detection and triage, alert correlation, investigation support, SOAR, and AI-assisted incident response.
Evaluate AI capabilities, address risks such as false positives and model limitations, and assess effectiveness against adversarial AI.
Assess complex network environments and cybersecurity capabilities; identify gaps; develop target-state architectures, modernization roadmaps, recommendations, and implementation strategies.
Advise stakeholders and lead technical strategy and implementation across teams and service providers.
Manage complex cybersecurity projects in an operational environment, coordinating schedules, risks, and dependencies among stakeholder teams.
Contribute to the roadmap for building a unified, customer-run SOC and integrating existing enterprise services into it.
Install, configure, and maintain data-ingestion pipelines across Splunk and Elastic environments.
Improve detection engineering, threat hunting, incident response, security analytics, playbooks, operational workflows, and measurable SOC performance.
Support and assess customer SOC tools and processes, identifying existing coverage and gaps.
Configure and monitor SASE architectures, such as Cloudflare and Zscaler security brokers, integrating zero-trust principles, identity-aware access controls, and network security controls.
Engineer and defend distributed sensor networks by strengthening endpoint and device security, securing data flows, and monitoring telemetry for anomalous activity.

Benefits

Medical, dental, and vision insurance premiums fully paid by iSenpai for employees and eligible dependents.
Tricare supplemental insurance for eligible employees and dependents.
Personal accident insurance.
Life insurance.
Short- and long-term disability insurance.
401(k) contribution matching at 5% dollar for dollar.
Paid time off starting at four weeks (20 days) per year.
PTO buyback program.
11 paid federal holidays.
Reimbursement for wellness and/or work-life balance programs.
Reimbursement for cell phone plans.
Reimbursement for home internet.
Cell phone upgrade reimbursement every two years.
Discounts on products and services, including cell phone bills, NFL tickets, movie tickets, and live performances.
Rewards for obtaining new IT certifications.
Computer-based training library covering IT, information security, and certifications.
Remote access to a virtual lab for testing and learning.
Flexible/alternative work schedules based on customer requirements.
HSA contribution.