SOC Architect

OpenKyber is seeking a Cybersecurity Operations Technical Lead (SOC Engineer/SME) to support government customer in Washington, DC. This position requires the candidate to be able to obtain a Public Trust. Competitive compensation and benefits package offered. The candidate will provide technical leadership and guidance to cybersecurity analysts, supporting the U.S. Small Business Administration (SBA). Responsibilities:

• Lead SOC operations and provide SME guidance on security incident detection and response.
• Coordinate incident response activities to comply with SBA federal guidelines.
• Monitor networks and endpoints using SIEM, IDS/IPS tools to detect threats.
• Develop and tune SIEM use cases and detection rules to enhance threat detection.
• Conduct advanced threat hunting for IOCs and TTPs.
• Analyze security events, network traffic, and endpoint telemetry for malicious activity.
• Develop SOPs, playbooks, and runbooks for SOC and incident response.
• Mentor junior to mid-level SOC analysts.
• Support vulnerability management efforts.
• Prepare technical reports and brief SBA leadership.
• Ensure SOC operations align with NIST, FISMA, DHS/CISA frameworks.
• Coordinate with federal agencies during major cybersecurity incidents.
• Improve SOC processes, tools, and cybersecurity posture.

• Bachelor’s degree in Cybersecurity, IT, Computer Science, or related field.
• 8+ years cybersecurity operations, 3+ years technical lead/SME in SOC.
• Experience supporting federal cybersecurity programs.
• Certifications such as CISSP, GSOC, GCIH, GCED, CSA preferred., * Strong SOC operations expertise, incident detection and response.
• Experience with SIEM platforms, use case development, and rule tuning.
• Knowledge of network security concepts, TCP/IP, DNS, HTTP/S, firewalls, IDS/IPS.
• Proficiency in EDR tools and threat intelligence platforms.
• Familiarity with MITRE ATT&CK framework.
• Experience with incident response playbooks and SOPs.
• Understanding of federal cybersecurity compliance and log analysis.
• Leadership and mentorship abilities.
• Public Trust Clearance eligibility.

Desired Skills:

• Prior federal civilian agency cybersecurity experience.
• Cloud security monitoring (AWS, Azure, GCP).
• Experience with SOAR platforms and scripting (Python, PowerShell).
• Knowledge of Zero Trust Architecture and digital forensics.
• Familiarity with CDM program and FedRAMP.