Zero Trust Security Engineer — SIEM, SOAR & Linux

SOSi; Hawaii; On-site; USD 125,000 - 168,000; Full time

Job summary

SOSI is hiring a Cyber Security Engineer to architect and evolve the security ecosystem for a DoD Command and Control enterprise that supports thousands of users across the INDOPACOM theater. You will integrate SIEM, SOAR, and Linux automation to deliver actionable telemetry and automated security outcomes.

You will design detections aligned to MITRE ATT&CK, build dashboards, and support DoD RMF and STIG compliance.

Qualifications

• Bachelor's degree in Cyber Security, Computer Science, Information Systems, Computer Engineering or a related field.
• 3+ years hands-on engineering experience with SIEM/SOAR/EDR or equivalent security data pipelines.
• DoD 8570 IAT-II compliant security certifications (e.g., Security+, CCNA, CySA+, GICSP, GSEC, SSCP).
• Strong scripting or automation in Python/PowerShell/Bash/Ansible with REST API integrations.
• Experience implementing Zero Trust architectures and RMF/SCAP compliance in DoD environments.

Responsibilities

• Architect and evolve the security ecosystem supporting a DoD C2 enterprise across 5,000+ users.
• Integrate SIEM, SOAR, and Linux automation to deliver telemetry, automated outcomes, and real-time risk visibility.
• Develop detections and dashboards mapped to MITRE ATT&CK; reduce false positives with SOC.
• Design and maintain Zero Trust capabilities and DoD Reference Architecture alignment.
• Collaborate with SOC, engineers and government leaders to drive cyber resilience.

Skills

SIEM expertise

SOAR experience

Linux/Windows administration

Scripting (Python/PowerShell/Bash/AnsI

Communication to leadership

Education

Bachelor's degree in Cyber Security or related field

Tools

Elastic SIEM

SOAR platform

EDR

Vulnerability management (ACAS)

Linux configuration management

Job description

SOSI is hiring a Cyber Security Engineer to architect and evolve the security ecosystem for a DoD Command and Control enterprise that supports thousands of users across the INDOPACOM theater. You will integrate SIEM, SOAR, and Linux automation to deliver actionable telemetry and automated security outcomes.

You will design detections aligned to MITRE ATT&CK, build dashboards, and support DoD RMF and STIG compliance.