> Markdown version of [/jobs/ext/2015982-soc-architect](https://www.wearedevelopers.com/jobs/ext/2015982-soc-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # SOC Architect - **Company:** OpenKyber LLC - **Location:** Washington, DC, United States - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Microsoft Azure, Cloud Computing Security, Cyber Security, Computer Networks, Digital Forensics, Domain Name System (DNS), Hypertext Transfer Protocols (HTTP), Intrusion Detection and Prevention, Intrusion Detection Systems, Python (Programming Language), Network Security, Log Analysis, Performance Tuning, Windows PowerShell, Zero Trust Network Access, Runbook, Security Information and Event Management, TCP/IP, Software Vulnerability Management, Scripting, Google Cloud, Mitre Att&ck, Cyber Threat Analysis, Firewalls (Computer Science), Information Technology - **Published:** August 10, 2026 - **Apply:** https://www.adzuna.com/details/5835163469 ## About the Role * Bachelor's degree in Cybersecurity, IT, Computer Science, or related field. * 8+ years cybersecurity operations, 3+ years technical lead/SME in SOC. * Experience supporting federal cybersecurity programs. * Certifications such as CISSP, GSOC, GCIH, GCED, CSA preferred., * Strong SOC operations expertise, incident detection and response. * Experience with SIEM platforms, use case development, and rule tuning. * Knowledge of network security concepts, TCP/IP, DNS, HTTP/S, firewalls, IDS/IPS. * Proficiency in EDR tools and threat intelligence platforms. * Familiarity with MITRE ATT&CK framework. * Experience with incident response playbooks and SOPs. * Understanding of federal cybersecurity compliance and log analysis. * Leadership and mentorship abilities. * Public Trust Clearance eligibility. Desired Skills: * Prior federal civilian agency cybersecurity experience. * Cloud security monitoring (AWS, Azure, GCP). * Experience with SOAR platforms and scripting (Python, PowerShell). * Knowledge of Zero Trust Architecture and digital forensics. * Familiarity with CDM program and FedRAMP. ## Description OpenKyber is seeking a Cybersecurity Operations Technical Lead (SOC Engineer/SME) to support government customer in Washington, DC. This position requires the candidate to be able to obtain a Public Trust. Competitive compensation and benefits package offered. The candidate will provide technical leadership and guidance to cybersecurity analysts, supporting the U.S. Small Business Administration (SBA). Responsibilities: * Lead SOC operations and provide SME guidance on security incident detection and response. * Coordinate incident response activities to comply with SBA federal guidelines. * Monitor networks and endpoints using SIEM, IDS/IPS tools to detect threats. * Develop and tune SIEM use cases and detection rules to enhance threat detection. * Conduct advanced threat hunting for IOCs and TTPs. * Analyze security events, network traffic, and endpoint telemetry for malicious activity. * Develop SOPs, playbooks, and runbooks for SOC and incident response. * Mentor junior to mid-level SOC analysts. * Support vulnerability management efforts. * Prepare technical reports and brief SBA leadership. * Ensure SOC operations align with NIST, FISMA, DHS/CISA frameworks. * Coordinate with federal agencies during major cybersecurity incidents. * Improve SOC processes, tools, and cybersecurity posture. ## Related Videos - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [An Applied Introduction to eBPF with Go](https://www.wearedevelopers.com/videos/1075-an-applied-introduction-to-ebpf-with-go) - [Technical Documentation - How Can I Write Them Better and Why Should I Care?](https://www.wearedevelopers.com/videos/681-technical-documentation-how-can-i-write-them-better-and-why-should-i-care) - [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script) - [Turning Container security up to 11 with Capabilities](https://www.wearedevelopers.com/videos/718-turning-container-security-up-to-11-with-capabilities) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)