Senior Cybersecurity Engineer / Analyst

Overview

SOSi is seeking a Senior Cybersecurity Engineer / Analyst to join the elite Hawaii NSOC, supporting INDOPACOM with secure, multi-enclave connectivity and cutting-edge Desktop as a Service (DaaS) cloud technology. This is your chance to lead from the front - driving incident response, mentoring rising talent, and engineering the next generation of defensive tools and playbooks.

You'll collaborate with detection engineers and leadership to validate AI-assisted detections and evolve automation playbooks, keeping the SOC sharp, adaptive, and ahead of the threat curve. If you're ready to fuse deep cyber expertise with emerging AI capabilities, this is the role where your impact will be immediate and mission-critical.

Essential Job Duties

• Perform advanced analysis of SIEM, SOAR, EDR, and NTA telemetry to detect stealthy adversary activity.
• Lead incident response actions, from containment through remediation, coordinating across teams.
• Tune security tools, detections, and playbooks for accuracy and efficiency.
• Actively participate in proactive threat hunting and adversary tracking.
• Validate and refine AI-assisted detections with analyst input, reducing false positives.
• Mentor junior analysts and lead tabletop exercises, cross-training, and lessons learned.
• Ensure compliance with NSOC SOPs, DoD cybersecurity policies, and accreditation frameworks.

Minimum Requirements

• Active in scope SECRET clearance.
• Bachelor's Degree in Cybersecurity, Computer Science, or related field; OR equivalent work experience/certifications.
• DoD 8140 baseline certification (CASP+/SecurityX or CISSP or GCIA or GCIH or CEH or CFR).
• Minimum of 3+ years SOC/NSOC or equivalent cyber defense experience.
• Strong knowledge of network security principles, intrusion detection, and incident response.
• Experience with packet capture tools and scripting for analysis (Python, PowerShell, etc.).
• Excellent written and verbal communication skills.

Preferred Qualifications

• Hands-on experience with SOAR playbook development and tool integrations.
• Familiarity with MITRE ATT&CK and red/blue team exercises.
• Experience applying or validating AI/LLM-assisted detections (nice to have).
• Advanced vendor certifications (Elastic, Splunk, Palo Alto, Tenable).

Work Environment

• Schedule: This position supports a 24/7/365 NSOC. Shifts may include days, nights, weekends, and holidays. Scheduling will be coordinated with the team to balance mission coverage. Flexibility is required to support incident escalations and high-priority events outside normal shift hours.
• Environment: High-tempo, mission-critical SOC with opportunities to lead projects and mentor junior staff.
• Relocation packages may include a two-year commitment.

Working at SOSi

All interested individuals will receive consideration and will not be discriminated against for any reason.