Cyber Security Engineer SME
About The Position
SOSi is seeking a Senior Cybersecurity Engineer to serve as a technical subject matter expert supporting an enterprise cyber defense program for a federal customer. This senior, highly visible role sits at the intersection of security engineering, architecture, and operations, shaping how the customer evaluates, integrates, and matures its defensive capabilities. The position is located in the Washington, DC metropolitan area, is contingent upon contract award, and requires the ability to obtain a Secret clearance. The engineer serves as a trusted technical advisor across a broad defensive cybersecurity portfolio. The role assesses security architecture, identifies gaps, and designs practical solutions to strengthen detection, response, and protection across on-premises, cloud, and mobile environments. It leads technical evaluations and proofs of concept for new security technologies and communicates findings as recommendations to leadership. The engineer works with security operations, engineering, and system owner teams to turn operational needs into security requirements and controls and to integrate security into development and deployment pipelines. The role also supports adoption of emerging technologies, including AI-enabled capabilities and cryptographic modernization, and requires technical breadth, sound engineering judgment, and communication skills for both technical and non-technical audiences.
Requirements
- Five years of security-related experience.
- Experience implementing tools and processes to support comprehensive offensive and defensive cybersecurity solutions to identify, detect, and mitigate sophisticated cybersecurity threats.
- Experience with incident response methodologies, categories and timelines, cyber defense policies and procedures, and the ability to perform damage assessments and determine remediation paths.
- Experience with intrusion and threat detection methodologies for cloud, host, network, and mobile environments.
- Experience using and tuning security event correlation tools.
- Understanding of attack classes, attack stages, and adversary behaviors.
- Knowledge of MITRE ATT&CK and D3FEND frameworks and the ability to map them to enterprise cybersecurity tool implementations and investments.
- Bachelor’s degree.
- One of the following certifications: CISSP (associate), CCSP, SSCP, GMON, GCIH, GCIA, an equivalent GIAC certification, CEH, or CASP; and one certification from the CSSP Analyst, Infrastructure Support, or IR categories on the DoD 8140 list, or another similar certification as approved by the Government.
- Secret clearance required; the posting also states Secret (active) and eligibility for Top Secret/SCI clearance.
- Ability to obtain a Secret clearance.
Nice To Haves
- Experience with digital media analysis and digital forensics.
- Experience conducting static and dynamic analysis, including sandboxing and reverse engineering, of malicious binaries to understand adversary TTPs, identify C2 infrastructure, and extract IOCs.
- Experience correlating forensic findings with SOC alerts, threat intelligence, and adversary TTPs.
- Knowledge of network security architecture, topology, and communication principles.
- Understanding of network protocols, including TCP/IP, DHCP, DNS, and directory services.
- Understanding of cloud service models and their impact on incident response capabilities.
- Knowledge of system administration, OS hardening, and application security threats.
Responsibilities
- Serve as a senior technical advisor on enterprise security architecture, engineering, and defensive operations.
- Conduct security architecture reviews, identify gaps, and develop risk management recommendations.
- Translate operational and mission requirements into security requirements, control baselines, and concepts of operation.
- Plan, integrate, and tune security tooling across monitoring, detection, automation, and threat intelligence platforms.
- Lead market research, technical evaluations, and proofs of concept for emerging cybersecurity technologies.
- Support the security of cloud environments (IaaS, PaaS, SaaS) and integrate security practices into DevSecOps pipelines.
- Provide security engineering support for identity, authentication, and mobile security initiatives.
- Support cryptographic modernization efforts, including discovery, inventory, and planning for next-generation encryption standards.
- Advise on the secure adoption of AI and generative AI technologies.
- Apply incident response methods and support complex investigations as a technical escalation resource.
- Develop scripts and automation to improve efficiency in security engineering and operations tasks.
- Produce technical documentation, briefings, and recommendations for government and program leadership.
- Mentor team members and contribute to continuous improvement of engineering processes.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
