Cybersecurity Branch Chief

Company Description

Founded in 1989 and headquartered in Reston, Virginia, SOSi is a private defense and government solutions business specializing in advanced technology systems and mission support. Its capabilities include data science, software development, network engineering, intelligence, surveillance, and reconnaissance (ISR), and logistics.

Job Description

🛡️ Lead the Mission. Secure the Enterprise. Enable the Indo-Pacific.

SOSi is seeking a visionary Cybersecurity Branch Chief to oversee enterprise security operations supporting one of the Department of Defense's largest coalition information-sharing environments at Camp H.M. Smith, Honolulu. In this strategic leadership role, you will guide cybersecurity teams responsible for protecting critical classified and coalition networks, enabling secure collaboration between U.S., allied, and partner nation forces across the Pacific theater.

Mission Impact

The Cybersecurity Branch Chief is responsible for maintaining the authorization, compliance, defensive cyber, and security posture of a globally distributed coalition enterprise supporting information sharing across U.S., allied, and partner nation mission networks throughout the Pacific theater.

Essential Job Duties

Branch Leadership and Government Engagement

• Own the overall cybersecurity compliance status, cyber risk posture, and strategic direction of the enterprise.
• Serve as the senior cybersecurity advisor to the AO, AODR, SCAs, CSSP, Service components, and command leadership.
• Establish and maintain an enterprise cyber risk management framework.
• Direct cybersecurity activities spanning multiple classified and coalition enclaves.
• Direct cybersecurity operations across disconnected, air-gapped, and intermittently connected environments.
• Manage branch resources, staffing, hiring recommendations, contractor performance, succession planning, and workforce development.
• Deliver recurring executive-level reporting, AO risk assessments, quarterly reviews, and cybersecurity posture updates.

Assessment and Authorization

• Direct RMF and A&A execution.
• Own and oversee an enterprise portfolio of concurrent authorization efforts.
• Manage authorization activities through eMASS.
• Guide implementation of Zero Trust Architecture and ICAM initiatives.
• Oversee CDS and CSfC authorization and sustainment activities.

Vulnerability and Configuration Compliance

• Lead the enterprise vulnerability management program including ACAS, STIG compliance, and POA&M management.
• Establish governance and remediation processes for disconnected and coalition environments.

Defensive Cyber Infrastructure

• Direct deployment and sustainment of Trellix ePO, Elastic/Kibana, Suricata, Snort, and related defensive cyber tooling.
• Coordinate with CSSP and higher cyber authorities on reporting and operational priorities.

Security Management

• Direct personnel and information security operations, including DISS actions, classified material control, and foreign visit processing.

Team Leadership

• Lead and mentor subordinate managers and team leads.
• Manage a geographically dispersed workforce operating across multiple locations, datacenters, and time zones throughout the Pacific AOR.

Qualifications

Minimum Requirements

• Active in-scope TOP SECRET clearance.
• DoD 8140 DCWF 722 Advanced ISSM compliant.
• Twelve (12) or more years of cybersecurity experience.
• Five (5) years leading cybersecurity organizations.
• Demonstrated expertise with RMF, A&A, NIST 800-53 Rev 5, and eMASS.
• Demonstrated experience supporting cybersecurity operations in disconnected, air-gapped, classified, or operationally constrained environments.
• Hands-on experience with ACAS, STIG/SRG compliance, POA&M management, and continuous monitoring.

Preferred Qualifications

• Active TS/SCI.
• CISSP, CISSP-ISSMP, CISM, CCISO, GSLC, or equivalent.
• Experience with CDS and CSfC.
• Experience supporting USPACOM, MPE, coalition networks, or multinational information sharing programs.
• Experience in geographically dispersed, disconnected, intermittent, and air-gapped architecture.
• Experience supporting DCO, SOC, or CSSP missions.
• Familiarity with ZTA, ICAM, and DevSecOps principles.

Additional Information

Work Environment

• Working conditions are normal for an office environment, with occasional remote work options.
• Occasional travel estimated at approximately 10% and the ability to respond to security incidents outside of regular business hours.
• May require the ability to lift/and or move computer hardware and office equipment.

Working at SOSi

All interested individuals will receive consideration and will not be discriminated against for any reason.