Company Description
Founded in 1989, SOSi is among the largest private, founder-owned technology and services integrators in the defense and government services industry. We deliver tailored solutions, tested leadership, and trusted results to enable national security missions worldwide.
Job Description
**This position is contingent upon contract award**
SOSi is seeking highly qualified senior professionals to support a DHS enterprise cybersecurity program providing 24/7 Security Operations Center (SOC) services. These roles deliver leadership, operational oversight, and technical expertise across cyber defense, incident response, intelligence, engineering, and modernization activities.
Job Description
Leads digital forensics and insider-threat investigations; ensures evidence handling, chain-of-custody, and high-confidence analysis that supports rapid incident containment and remediation.
Responsibilities
- Conduct host- and network-based forensics, malware triage, and insider-threat investigations.
- Develop dashboards, reports, and workflow diagrams for forensics/IR processes; mentor junior analysts.
- Coordinate with DHS and law-enforcement investigative entities; manage escalations and reporting.
Qualifications
- Experience:
- A minimum of seven (7) years of professional experience with a solid understanding of incident response, insider threat investigations, forensics, cyber threats and information security.
- A minimum of five (5) years of hands-on experience with experience in the last two (2) years that includes host-based and network based security monitoring, identifying and analyzing anomalous activities with familiarity in insider threat monitoring software, host-based forensic tools, intrusion detection systems, intrusion analysis functions, security information event management (SIEM) platforms, endpoint threat detection tools, security operations ticket management.
- The ability to create insider threat focused dashboards, reports and workflow diagrams.
- Experience collecting data and reporting results; handling and escalating security issues or emergency situations appropriately; providing incident response capabilities to isolate and mitigate threats to maintain confidentiality, integrity, and availability for protected data.
- Experience with ad hoc training to junior members in a collaborative environment.
- Certifications: CISSP.
- Clearance: TS, SCI-eligible.
Additional Information
Work Environment
- Work hybrid/on-site as required.
- Normal office conditions with potential to perform duties in CONUS locations.
- Core hours of operation are Monday through Friday, 0600 – 1700.
- May be requested to work evenings and weekends to meet program and contract needs.
Working at SOSi
All interested individuals will receive consideration and will not be discriminated against for any reason.
