{"id":2638446,"url":"https://alion.io/job/sosi-cybersecurity-security-engineer","title":"Cybersecurity Security Engineer","company":{"id":5998,"name":"SOSi","domain":"sosi.com","url":"https://alion.io/company/sosi","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartRecruiters","truth_index":{"grade":"C","score":58,"open_postings":214,"ghost_share":0.696,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":29,"computed_at":"2026-10-15T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Joint Base Pearl Harbor Hickam, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":124512,"max":168091,"currency":"USD","period":"year","gross":null,"usd_annual":168091},"salary_estimate":null,"experience_years_min":9,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Ansible","optional":false},{"name":"Bash","optional":false},{"name":"DNS","optional":false},{"name":"Linux","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PKI","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"SIEM","optional":false},{"name":"Windows","optional":false},{"name":"Windows Server","optional":false},{"name":"Zero Trust","optional":false},{"name":"Red Hat","optional":true}],"status":"live","first_seen_at":"2026-10-15T17:12:10Z","employer_posted_date":"2026-10-15","last_verified_at":"2026-10-16T01:17:57Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Founded in 1989 and headquartered in Reston, Virginia, SOSi is a private defense and government solutions business specializing in advanced technology systems and mission support. Its capabilities include data science, software development, network engineering, intelligence, surveillance, and reconnaissance (ISR), and logistics.\n Shape the future of Zero Trust cybersecurity across the Pacific.\nSOSi is seeking a Cyber Security Engineer to architect, integrate, and evolve the security ecosystem supporting a mission-critical Command and Control (C2) enterprise serving more than 5,000 users across the INDOPACOM theater. You'll unite SIEM, SOAR, and Linux automation technologies into a streamlined, intelligence-driven platform that delivers actionable telemetry, automated security outcomes, and real-time risk visibility. Working alongside engineers, SOC operators, and senior government leaders, you'll help drive the next generation of cyber resilience and Zero Trust operations.\nAt SOSi, we tackle complex technical challenges head-on-because Challenge Accepted isn’t just a motto, it’s how we operate\nEssential Job Duties:\nZero Trust engineering\nAssess, design and maintain the roadmap for security capabilities aligned to the DoD Zero Trust Reference Architecture and Target-level activities across all seven pillars.\nTranslate Zero Trust requirements into concrete configurations, segmentation rules and policies, and document how each control maps to the architecture.\nEvaluate, pilot and integrate new security technologies to close Zero Trust capability gaps.\nSIEM, telemetry and analytics\nDesign, deploy and tune SIEM Security, including Agent policies, integrations, index lifecycle management, data tiers and cluster sizing.\nEngineer security data pipelines that collect, filter, enrich and normalize data to a Common Schema before it reaches the SIEM, controlling volume and cost.\nDevelop, test and tune detection rules, dashboards and alerts mapped to MITRE ATT&CK, reducing false positives in partnership with the SOC.\nSecurity orchestration, automation and response (SOAR)\nDesign, deploy and maintain the SOAR platform and its integrations with the SIEM, endpoint, vulnerability, identity, network and ticketing systems.\nBuild and test playbooks for alert triage, enrichment, containment (e.g., isolating hosts, disabling accounts) and case management, with human approval gates where required.\nSupport the Automation and Orchestration pillar of the DoD Zero Trust strategy, including policy decision and enforcement integration.\nEndpoint security\nEngineer and harden enterprise endpoint protection and EDR platforms, including DoD-mandated endpoint security solutions, covering policy, host intrusion prevention and device control.\nMaintain agent health, deployment coverage and policy compliance across Windows and Linux endpoints, and forward endpoint telemetry into the SIEM.\nVulnerability management\nOperate and optimize enterprise vulnerability scanning in line with DoD requirements (e.g., ACAS), including credentialed scan design, scan zones and reporting.\nDrive remediation by correlating findings with asset owners and patch status, tracking IAVM compliance and producing risk-based remediation priorities.\nLinux engineering and compliance\nEngineer, build and maintain the enterprise Linux server infrastructure, including standard hardened builds, identity integration, performance and availability, upgrades and lifecycle replacement\nEngineer Linux content lifecycle, patching and errata workflows to deliver timely, tested updates across environments.\nAutomate STIG and SCAP compliance with configuration-as-code, and report compliance status to leadership.\nCompliance, risk and reporting\nImplement and validate STIGs and SRGs, and produce RMF artifacts, POA&Ms and evidence for assessments and inspections (e.g., CORA).\nInteract with vendors, other agencies and coalition partners on behalf of the program. \nContribute to After Action Reports (AARs) and submit Weekly Activity Reports (WARs) in accordance with contract requirements.\n Minimum Requirements\nActive, in-scope Top Secret clearance with SCI eligibility, and a valid US passport.\nBachelor's degree in Cyber Security, Computer Science, Information Systems, Computer Engineering or a related field and 5+ years of experience OR 9+ years of cybersecurity engineering experience in DoD or classified environment.\n3+ years hands-on engineering (deploying, tuning and integrating, not only operating) with at least three of: SIEM (Elastic preferred), SOAR, security data pipelines, EDR, enterprise vulnerability management, and Linux configuration and patch management.\nDoD 8570 IAT-II compliant (Security+ CE, CCNA, CND, CySA+, GICSP, GSEC, or SSCP).\nWorking knowledge of Zero Trust concepts, the DoD Zero Trust Reference Architecture, and tiered or privileged access models.\nSolid administration skills in Linux and Windows Server, including Active Directory, Kerberos, PKI and DNS fundamentals.\nExperience implementing STIGs and SRGs, SCAP scanning and RMF documentation in DoD environments.\nScripting or automation in at least one of Python, PowerShell, Bash or Ansible, including REST API integrations.\nClear written and verbal communication, including the ability to brief technical topics to senior leadership.\nPreferred qualifications\nHands-on engineering experience across all the capability areas above, including building SOAR playbooks in production.\nElastic certifications (Elastic Certified Engineer or Analyst) and vendor certifications for the SOAR, EDR, data pipeline or vulnerability management platforms in use.\nRed Hat certifications (RHCSA or RHCE), and experience with Linux identity management integrated with Active Directory trusts.\nExperience designing detections with MITRE ATT&CK and building SOC workflows and metrics.\nExperience with privileged access workstations (PAWs), tiered or ESAE-style administration, and phishing-resistant MFA (CAC/PIV).\nFamiliarity with Data Centric Security, NSA CSfC capability packages and Cross Domain Solutions (CDS).\nExperience with virtualization and hyperconverged platforms from a security-hardening perspective.\n Work Environment\nWorking conditions are normal for an office environment.\nMission operations supporting a 24/5 baseline with potential evening, overnight, weekend, exercise, contingency, and surge coverage based on contract and mission requirements.\nFast paced, deadline-oriented environment.\nWorking at SOSi\nAll interested individuals will receive consideration and will not be discriminated against for any reason.","description_format":"text","description_chars":6589,"description_truncated":false,"requirements":{"experience_years_min":9,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","IT Infrastructure & Networking Services","Security Operations"],"lifecycle":[{"event":"open","at":"2026-10-15T18:07:45Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":29,"reasons":["conf:0","win:early","comp:brand"],"computed_at":"2026-10-16T01:31:54Z"},"pay":{"stated_usd_annual":168091,"is_top_pay":false},"html_url":"https://alion.io/job/sosi-cybersecurity-security-engineer","json_url":"https://alion.io/job/sosi-cybersecurity-security-engineer.json","meta":{"generated_at":"2026-10-16T01:31:54Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2377,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5998},"rest":"https://alion.io/mcp/rest/get_company?id=5998"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsosi-cybersecurity-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsosi-cybersecurity-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsosi-cybersecurity-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sosi-cybersecurity-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsosi-cybersecurity-security-engineer"}]}