Social Engineering Analyst

System One; Merrifield (VA); Hybrid; USD 90,000 - 130,000; Part time

Job summary

System One, Inc. is seeking a junior to mid-level Social Engineering Analyst for a long-term contract in Vienna, VA.

The role is hybrid, onsite three days a week, and focuses on executing and coordinating phishing and smishing simulations across multiple campaigns with strong reporting requirements. You will work with cybersecurity teams and business stakeholders to ensure campaigns run on schedule, maintain documentation, and support a broader Enterprise Social Engineering program.

Qualifications

• Bachelor's degree in cybersecurity, information tech, or related field.
• Experience with phishing or smishing simulations.
• Security+ or equivalent certification preferred, but not required.
• Experience following established processes and reporting is beneficial.

Responsibilities

• Execute monthly phishing, quarterly privileged-user phishing, and quarterly enterprise smishing campaigns.
• Manage campaign configuration, targeting, scheduling, and supporting materials.
• Perform pre-launch quality assurance and monitor active campaigns; troubleshoot issues.
• Coordinate with stakeholders, Communications and Training partners, and business units.
• Maintain campaign documentation and support recurring KPI/KRI reporting.

Skills

Attention to detail

Campaign coordination

Analytical thinking

Written communication

Education

Bachelors in cybersecurity

Job description

Title: Social Engineering Analyst

Location: Vienna, VA (Hybrid, onsite 3 days a week)

Pay Rate: Open to W2 options

Position Type: Contract

We are seeking a Social Engineering Analyst for a long term contracting position located in Vienna, VA. Candidates will work a hybrid schedule, onsite 3 days a week. We are looking for LOCAL CANDIDATES and are open to W2 (no c2c).

We are looking for candidates with 5-10 years of professional experience. This is a junior-level cybersecurity position focused on executing and coordinating enterprise-wide social engineering simulations, primarily phishing and smishing campaigns. The analyst will manage recurring campaigns from setup through reporting, including configuring templates and targeting, scheduling launches, performing quality checks, monitoring results, analyzing campaign data, and maintaining documentation. The role supports a broader Enterprise Social Engineering and Human Risk Management program by ensuring required campaigns are completed consistently and on schedule. The analyst will also coordinate with cybersecurity teams, business stakeholders, and Communications and Training partners. This is primarily an operational execution role rather than a cybersecurity engineering or program strategy position.

We are looking for candidates with direct phishing simulation or security awareness campaign experience.

This position will provide reliable operational support for the established Social Engineering program and its capabilities. By supporting recurring campaign execution and coordination, the contractor will help maintain mandated activities while creating capacity for existing analysts to pursue strategic program development and expanded social engineering capabilities.

The Social Engineering Analyst will support the continued execution of the Enterprise Social Engineering program. The resource will provide operational capacity for Board KRI-mandated monthly Enterprise phishing campaigns, quarterly Privileged User phishing campaigns, quarterly Enterprise smishing campaigns, and customized campaigns requested by business units. These activities require consistent campaign configuration, targeting, scheduling, quality assurance, monitoring, analysis, reporting, and documentation. The contractor will execute established campaigns and coordinate associated operational activities, helping required campaigns run consistently while allowing existing analysts to focus on 2027 priorities, including vishing, multi-channel and deepfake simulations, a red team exercise, outreach, and continued development of the Social Engineering and Human Risk Management programs.

Position Summary

The Social Engineering Analyst is a junior-level cybersecurity role responsible for executing and coordinating established phishing, smishing, and customized social engineering exercises. Working within documented processes, the analyst will configure, launch, monitor, and report on assigned campaigns. The role requires strong attention to detail, analytical ability, communication skills, and consistent execution of recurring cybersecurity activities.

Key Responsibilities

• Execute monthly Enterprise phishing, quarterly Privileged User phishing, and quarterly Enterprise smishing campaigns.
• Support customized social engineering campaigns requested by business units.
• Configure campaign scenarios, templates, targeting, schedules, and supporting materials using established processes.
• Coordinate timelines, stakeholder inputs, targeting requirements, approvals, quality assurance, launch activities, and results reporting.
• Perform pre-launch quality assurance; monitor active campaigns; troubleshoot or escape issues as appropriate.
• Compile and validate campaign results; analyze outcomes, trends, and anomalies requiring additional review.
• Support recurring KRI/KPI and management reporting and maintain historical campaign metrics.
• Maintain procedures, records, and supporting documentation.
• Coordinate with Communications and Training partners on social engineering and awareness content.

Preferred Qualifications

• Bachelor's degree in cybersecurity, information technology, computer science, information systems, or a related discipline preferred; relevant professional experience may be considered in lieu of a degree.
• Cybersecurity experience with an interest in social engineering, security awareness, or related defensive cybersecurity disciplines.
• Direct experience supporting or executing social engineering exercises, particularly phishing or smishing simulations, strongly preferred.
• Security+, CySA+, or a comparable cybersecurity certification preferred, but not required.
• Experience following established processes and executing recurring operational activities.
• Experience compiling, validating, or analyzing cybersecurity or operational data; familiarity with KPI/KRI or management reporting is beneficial.
• No experience with a specific social engineering platform or technology is required.

Key Skills

• Strong attention to detail, quality, and consistent process execution.
• Effective organizational, analytical, and problem-solving skills, including management of multiple campaign activities and deadlines.
• Clear written and verbal communication and the ability to collaborate with cybersecurity teams, business stakeholders, and Communications and Training partners.
• Sound judgment when handling cybersecurity-related information and escalating operational issues.

Ref: #851-Rockville-S1

System One, and its subsidiaries including Joulé, ALTA IT Services, CM Access, TPGS, and MOUNTAIN, LTD., are leaders in delivering workforce solutions and integrated services across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible full-time employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.

System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.