Cyber Engineer-Virginia Beach, VA

iSenpai, LLC - SBA WOSB; Virginia Beach (VA); On-site; USD 158,000 - 165,000; Full time

Job summary

iSenpai is seeking a Senior Cybersecurity Engineer to lead security engineering, modernization of a fully operational SOC, and integration of SIEM/SOAR/EDR-XDR within enterprise environments. The role emphasizes defensive AI, threat hunting, incident response, and zero-trust implementations at a Virginia Beach site.

The position requires 8–10 years of cybersecurity engineering experience, active SECRET with TS/SCI eligibility, and 100% on-site work at a customer site in Virginia Beach, VA.

Qualifications

• Senior Cybersecurity Engineer will provide technical leadership, security engineering, and consulting to modernize a fully operational SOC.
• The role focuses on evaluating, integrating, and optimizing endpoint security technologies and defensive AI to improve threat detection, investigation, automation, and response.
• Architect and implement advanced security solutions and maximize value of enterprise investments.
• Drive SOC improvement through detection engineering, threat hunting, incident response, and adoption of new defensive capabilities.

Responsibilities

• Security architecture and network optimization: integrate SIEM/SOAR/EDR-XDR and IdAM into a cohesive SOC.
• Defensive AI and SOAR: apply AI/ML for detection, triage, alert correlation, and automations.
• Security consulting and technical leadership: assess environments, develop target-state architectures, and lead modernization roadmaps.
• SOC operations and threat defense: install/configure ingestion pipelines in Splunk/Elastic, improve detection, threat hunting, and incident response.
• Configure Secure Access Service Edge (SASE) architectures and zero-trust controls.

Skills

Cybersecurity engineering

Security architecture

Threat hunting

Incident response

Defensive AI/ML

Project management

Linux administration

Education

Bachelor's degree in Cybersecurity or related field

Tools

Splunk

Elastic

SOAR

EDR/XDR

Cloud-native security tools

Active Directory

Job description

iSenpai is a Woman-Owned Small Business (WOSB) that provides enterprise IT and cybersecurity services, cloud technology, and data analytics solutions for US Government and commercial customers. We specialize in cloud-based solutions with cybersecurity integrated into the design, delivered using efficient Agile DevSecOps. Engaging across industry and academia to develop innovative approaches, we support our customers’ changing mission needs and data. Our iSenpai designs are industry-proven to handle enormous data streams from open source, Internet of Things (IOT), cyber tools, and social media. We bring expertise with the National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53 and the Risk Management Framework (RMF) to maintain secure, scalable, and highly available systems to meet the mission. Our goal is to provide expert services to our clients while cultivating knowledge among all employees for the advancement of our services. We offer a comprehensive package of 100% employer-paid benefits, including medical, dental, vision, HSA Contribution, 401K match, and more.

iSenpai offers an extremely competitive benefits package to include:

• Health, Dental, and Vision Insurance Premiums are 100% provided by iSenpai for employees and eligible dependents
• Tricare Supplemental Insurance plan provided by iSenpai for eligible employees and dependents
• Personal Accident Insurance provided by iSenpai
• Life Insurance provided by iSenpai
• Short- and Long-Term Disability Insurance provided by iSenpai
• 401K Contribution Matching - 5% dollar for dollar
• Paid time off (PTO) starting at 4 weeks a year (20 days)
• PTO buyback program
• 11 paid Federal Holidays
• Reimbursement for any wellness programs and/or work-life balance programs
• Reimbursement for cell phone plans
• Reimbursement for home internet
• Reimbursement every 2 years for a cell phone upgrade
• Thousands of discounts on everything from your cell phone bill to NFL tickets, Movie Tickets, Live Performances, etc
• Rewards for obtaining new IT certifications
• Computer-based training (CBT) library on IT and information security topics and certifications
• Remote access to a virtual lab for testing/learning opportunities
• Flexible / Alternative Work Schedules (based on customer requirements)

iSenpai is an equal opportunity / affirmative action employer. We give equal consideration to all qualified candidates without regard to race, color, gender, nationality, disability, or protected veteran status.

Cyber Engineer (TO1 SOC)-Virginia Beach, VA

Required Education: Bachelor's Degree in Cybersecurity or related field.

Required Experience: 8-10 years of cybersecurity engineering, network security, and SIEM ingestion pipelines

Location: Virginia Beach, VA-100% on Customer site

Required Clearance: Active SECRET with TS/SCI eligibility

Description:

The Senior Cybersecurity Engineer will provide technical leadership, security engineering, and consulting expertise to modernize and enhance a fully operational Security Operations Center (SOC). The individual will assess existing cybersecurity capabilities, identify technology gaps and investment opportunities, and develop recommendations and implementation strategies to advance SOC effectiveness. A primary focus will be evaluating, integrating, and optimizing endpoint security technologies and defensive artificial intelligence (AI) to improve threat detection, investigation, automation, and response. The engineer will leverage broad cybersecurity expertise to architect and implement advanced security solutions, integrate enterprise technologies, and maximize the value of existing and future investments. The role will drive continuous SOC improvement through security innovation, detection engineering, threat hunting, incident response, and adoption of emerging defensive capabilities.

Responsibilities:

• Security architecture and network optimization: Broad experience integrating SIEM, SOAR, EDR/XDR, IdAM security, network defense from emerging threats and vulnerabilities, and hybrid security platform capabilities into a single cohesive SOC architecture. Experience engineering solutions within existing enterprise environments, managing technical dependencies, integrating shared services, and balancing security requirements with operational constraints.
• Defensive AI and SOAR: Experience applying artificial intelligence and machine learning in defensive cybersecurity applications, including AI-enabled detection and triage, alert correlation, investigation support, security orchestration and automation (SOAR), and AI-assisted incident response. Ability to evaluate AI capabilities and address risks such as false positives, model limitations, and evaluate their effectiveness against adversarial AI.
• Security consulting and technical leadership: Proven ability to assess complex network environments, conduct capability and gap assessments, develop target-state architectures and modernization roadmaps, advise stakeholders, and lead technical strategy and implementation across multiple teams or service providers. Demonstrated ability to manage complex cybersecurity projects in a fast-paced operational environment, coordinating schedules, risks, and dependencies across multiple stakeholder teams. Contribute to the roadmap for building a unified, customer-run SOC, integrating existing enterprise services into the new construct.
• SOC operations and threat defense: Install, configure, and maintain ingestion pipelines across Splunk and Elastic environments. Practical experience improving detection engineering, threat hunting, incident response, security analytics, playbooks, operational workflows, and measurable SOC performance. Support and assess the customer’s current SOC-related tools and processes, identifying existing coverage and gaps.
• Configure and monitor Secure Access Service Edge (SASE) architectures, such as Cloudflare and Zscaler security brokers, by integrating zero-trust principles, identity-aware access controls, network security, and implementing Zero Trust (ZT) security controls. Engineer and defend distributed sensor networks by strengthening endpoint and device security, securing data flows, and monitoring telemetry for anomalous activity.

Required Qualifications

• Flexibility to meet any threat scenario 24/7/365 as mission dictates.
• Active SECRET clearance with TS/SCI eligibility.
• Meets CSWF requirements for CNDSP Level III. Maintains compliance with DoDD 8140.01 Cyber Workforce requirements for CNDSP Level III roles.
• 8+ years of experience working with Linux-based networks and systems with strong network and system hardening skills.
• 6+ years of experience in security architecture, installing, configuring, and maintaining data ingest pipelines (e.g., Splunk/Elastic).
• 4+ years of project management/consulting experience working with cross-functional engineering teams and/or developers.Operational experience desired.
• 4+ years of EDR/XDR, SIEM, and Cloud-native security tools experience
• 3+ years of senior engineer experience for a SOC or similar technical leadership role
• 2+ years of experience with defensive AI/ML, focused on CND and SOAR real-world applications.
• Extensive knowledge and/or experience with SOC processes such as SIEM optimization, threat hunting, and RMF.
• Strong interpersonal skills with the ability to communicate technical concepts to both technical and non-technical stakeholders.

Desirable Qualifications:

• Certified Splunk Architect and/or Elastic/OpenSearch Engineer.
• CISSP, Security X, or relevant GIAC certifications (GCSA, GDSA, GDAP, GCIP).
• Experience with Microsoft Azure, Intune, Defender Endpoint Security, and Active Directory.

The salary range for this position is $158,000–$165,000 annually, commensurate with experience, qualifications, and other relevant factors.