Cyber Security Engineer SME

SOSi • Washington, DC

3d

About The Position

SOSi is seeking a Senior Cybersecurity Engineer to serve as a technical subject matter expert supporting an enterprise cyber defense program for a federal customer. This senior, highly visible role sits at the intersection of security engineering, architecture, and operations, shaping how the customer evaluates, integrates, and matures its defensive capabilities. The position is located in the Washington, DC metropolitan area and is contingent upon contract award. It requires the ability to obtain a Secret clearance.

The engineer will act as a trusted technical advisor across a broad defensive cybersecurity portfolio. The role assesses security architecture, identifies gaps, and develops practical solutions to strengthen detection, response, and protection across on-premises, cloud, and mobile environments. It leads technical evaluations and proofs of concept for security technologies and communicates findings as recommendations for leadership. The engineer works with security operations, engineering, and system owner teams to define security requirements and controls, integrate security into development and deployment pipelines, and support adoption of emerging capabilities, including AI-enabled technologies and cryptographic modernization.

Requirements

• Five years of security-related experience.
• Experience implementing tools and processes for comprehensive offensive and defensive cybersecurity solutions to identify, detect, and mitigate sophisticated threats.
• Experience with incident response methodologies, categories and timelines, cyber defense policies and procedures, damage assessments, and determining remediation paths.
• Experience in intrusion and threat detection methodologies for cloud, host, network, and mobile environments.
• Experience using and tuning security event correlation tools.
• Understanding of attack classes, attack stages, and adversary behaviors.
• Knowledge of MITRE ATT&CK and D3FEND frameworks and ability to map them to enterprise cybersecurity tool implementations and investments.
• Bachelor’s degree.
• At least one of the following certifications: CISSP (associate), CCSP, SSCP, GMON, GCIH, GCIA, equivalent GIAC certification, CEH, or CASP.
• At least one certification from the DOD 8140 CSSP Analyst, Infrastructure Support, or IR categories, or another similar certification approved by the Government.
• Secret clearance (active); eligible for Top Secret, SCI clearance.

Nice To Haves

• Experience with digital media analysis and digital forensics.
• Experience conducting static and dynamic analysis, including sandboxing and reverse engineering, of malicious binaries to understand adversary TTPs, identify C2 infrastructure, and extract IOCs.
• Experience correlating forensic findings with SOC alerts, threat intelligence, and adversary TTPs.
• Knowledge of network security architecture, topology, and communication principles.
• Understanding of network protocols, including TCP/IP, DHCP, DNS, and directory services.
• Understanding of cloud service models and their impact on incident response capabilities.
• Knowledge of system administration, OS hardening, and application security threats.

Responsibilities

• Serve as a senior technical advisor on enterprise security architecture, engineering, and defensive operations.
• Conduct security architecture reviews, identify gaps, and develop risk management recommendations.
• Translate operational and mission requirements into security requirements, control baselines, and concepts of operation.
• Plan, integrate, and tune security tooling across monitoring, detection, automation, and threat intelligence platforms.
• Lead market research, technical evaluations, and proofs of concept for emerging cybersecurity technologies.
• Support cloud security across IaaS, PaaS, and SaaS environments and integrate security practices into DevSecOps pipelines.
• Provide security engineering support for identity, authentication, and mobile security initiatives.
• Support cryptographic modernization, including discovery, inventory, and planning for next-generation encryption standards.
• Advise on the secure adoption of AI and generative AI technologies.
• Apply incident response methods and support complex investigations as a technical escalation resource.
• Develop scripts and automation to improve efficiency in security engineering and operations tasks.
• Produce technical documentation, briefings, and recommendations for government and program leadership.
• Mentor team members and contribute to continuous improvement of engineering processes.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior