Founded in 1989 and headquartered in Reston, Virginia, SOSi is a private defense and government solutions business specializing in advanced technology systems and mission support. Its capabilities include data science, software development, network engineering, intelligence, surveillance, and reconnaissance (ISR), and logistics.
Job Description*** This position is contingent upon contract award ***
Overview
SOSI is seeking a Senior Cybersecurity Engineer to serve as a technical subject matter expert supporting an enterprise cyber defense program for a federal customer. This senior, highly visible role sits at the intersection of security engineering, architecture, and operations. It shapes how the customer evaluates, integrates, and matures its defensive capabilities. The ideal candidate combines hands-on engineering depth with the judgment to advise government stakeholders on emerging threats and technologies. This position is located in the Washington, DC metropolitan area and requires the ability to obtain a Secret clearance.
Job Description
The Senior Cybersecurity Engineer serves as a trusted technical advisor across a broad defensive cybersecurity portfolio. In this role, you will assess the customer’s security architecture, identify gaps, and design practical solutions that strengthen detection, response, and protection across on-premises, cloud, and mobile environments. You will lead technical evaluations and proofs of concept for new security technologies and translate findings into clear recommendations for leadership.
You will work closely with security operations, engineering, and system owner teams. Together, you will turn operational needs into defined security requirements and controls, help integrate security into development and deployment pipelines. The role also supports the customer’s adoption of emerging technology areas, including AI-enabled capabilities and cryptographic modernization. Success in this position requires technical breadth, sound engineering judgment, and the ability to communicate complex security concepts to both technical and non-technical audiences.
Responsibilities
- Serve as a senior technical advisor on enterprise security architecture, engineering, and defensive operations
- Conduct security architecture reviews, identify gaps, and develop risk management recommendations
- Translate operational and mission requirements into security requirements, control baselines, and concepts of operation
- Plan, integrate, and tune security tooling across monitoring, detection, automation, and threat intelligence platforms
- Lead market research, technical evaluations, and proofs of concept for emerging cybersecurity technologies
- Support the security of cloud environments (IaaS, PaaS, SaaS) and integrate security practices into DevSecOps pipelines
- Provide security engineering support for identity, authentication, and mobile security initiatives
- Support cryptographic modernization efforts, including discovery, inventory, and planning for next-generation encryption standards
- Advise on the secure adoption of AI and generative AI technologies
- Apply incident response methods and support complex investigations as a technical escalation resource
- Develop scripts and automation to improve efficiency in security engineering and operations tasks
- Produce clear technical documentation, briefings, and recommendations for government and program leadership
- Mentor team members and contribute to continuous improvement of engineering processes
- Experience:
Five (5) years security-related experience
- Required:
- Experience implementing tools and processes to support comprehensive offensive and defensive cybersecurity solutions to identify, detect and mitigate sophisticated cybersecurity threats
- Experience with incident response methodologies, categories and timelines, cyber defense policies and procedures and the ability to perform damage assessments determine remediation paths
- Experience in intrusion and threat detection methodologies for cloud, host, network and mobile environments
- Experience in the use and tuning of security event correlation tools
- Understanding of attack classes, attack stages and adversary behaviors
- Knowledge of MITRE ATT&CK and D3FEND frameworks and the ability to map those to enterprise cybersecurity tool implementations and investments
- Desired:
- Experience with digital media analysis and digital forensics
- Experience conducting static and dynamic analysis (sandboxing, reverse engineering) of malicious binaries to understand adversary TTPs, identify C2 infrastructure and extract IOCs
- Experience correlating forensic findings with SOC alerts, threat intelligence, and adversary TTPs
- Knowledge of network security architecture, topology and communication principles
- Understanding of network protocols (TCP/IP, DHCP, DNS, directory services)
- Understanding of clous service models and their impact on incident response capabilities
- Knowledge of system administration, OS hardening and application security threats
- Education: Bachelor’s Degree
- Certifications: Any 1 of: CISSP (associate), CCSP, SSCP, GMON, GCIH, GCIA, or equivalent GIAC certification, CEH, CASP AND any 1 from the CSSP Analyst, Infrastructure Support, or IR from the DOD 8140 list (or other similar certifications as approved by Government)
- Clearance/Suitability: Secret (active); Top Secret, SCI Clearance (eligible)
Work Environment
- Normal office conditions with potential to perform duties in deployed locations.
- Core hours of operation are Monday through Friday, 0600 – 1700.
- May be requested to work evenings and weekends to meet program and contract needs.
Working at SOSi
All interested individuals will receive consideration and will not be discriminated against for any reason.
Skills Required
- Five years of security-related experience
- Experience implementing offensive and defensive cybersecurity tools and processes to identify, detect, and mitigate sophisticated threats
- Experience with incident response methodologies, cyber defense policies and procedures, damage assessments, and remediation planning
- Experience with intrusion and threat detection across cloud, host, network, and mobile environments
- Experience using and tuning security event correlation tools
- Understanding of attack classes, attack stages, and adversary behaviors
- Knowledge of MITRE ATT&CK and D3FEND frameworks and ability to map them to enterprise cybersecurity tools and investments
- Bachelor's degree
- One approved certification such as CISSP Associate, CCSP, SSCP, GMON, GCIH, GCIA, CEH, CASP, or equivalent GIAC certification
- One certification from the DoD 8140 CSSP Analyst, Infrastructure Support, or Incident Response categories, or an approved equivalent
- Active Secret clearance
- Top Secret/SCI clearance eligibility
- Experience with digital media analysis and digital forensics
- Experience conducting static and dynamic malware analysis, sandboxing, reverse engineering, IOC extraction, and C2 identification
- Experience correlating forensic findings with SOC alerts, threat intelligence, and adversary TTPs
- Knowledge of network security architecture, topology, communication principles, and network protocols
- Understanding of cloud service models and their impact on incident response
- Knowledge of system administration, OS hardening, and application security threats
SOSi Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about SOSi and has not been reviewed or approved by SOSi.
-
Healthcare Strength — Health coverage is considered a relative strength, with international plan options and substantial employer contribution that support OCONUS and travel-heavy work. Company materials also highlight a comprehensive medical offering alongside wellness support.
-
Retirement Support — A 401(k) program is available, with indications of employer matching though specifics are not publicly detailed. This suggests foundational retirement support for eligible employees.
-
Career-Linked Recognition & Rewards — Compensation is often characterized as competitive for cleared, hard‑to‑hire, and certain overseas or mission‑critical roles. Pay levels appear closely tied to contract demands, clearance, and location.
SOSi Insights
What We Do
SOSi is a technology and services integrator focused on the aerospace, defense, and government services industry, described as one of the largest private, founder-owned companies in its sector.
