Remote Cyber Defensive Subject Matter Expert (SME)

Summary

Join Arlo Solutions as a Proactive Cyber Defensive Subject Matter Expert (SME) to deliver consistent, responsive, and technical Cyber Security analysis within the defensive cybersecurity landscape. The Defensive Cyber SME will play a critical role within the Chief Data and Artificial Intelligence Office (CDAO) for the Office of the Secretary of Defense.

Requirements

• Must have a current and active Secret security clearance
• Master’s degree in a related field from an accredited university/college
• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or related field
• Minimum 5 years of combined Joint, Interagency, OSD, or Service Headquarters experience performing work related to task area
• Minimum 5 years of experience using communication skills, both written and oral, to include preparation of written products for senior leader (general officer/flag officer/senior executive service level)
• Ability to communicate complex cybersecurity concepts to both technical and non-technical stakeholders, including senior leadership
• Must be comfortable in outward-facing roles, including presenting to senior leadership and participating in external vendor discussions

Responsibilities

• Support the CDAO CIO with expert knowledge of defensive cyber, policies, and processes
• Lead studies and assessments to identify gaps in the organizations cyber operations posture and recommend mitigations
• Foster partnerships with stakeholders across the CDAO and develop action plans
• Consultation with Subject Matter Experts: Engage with cybersecurity and technology SMEs across government and industry to assess potential threats in the evolving cyber landscape
• Policy and Strategy Development: Work with the CDAO CIO to develop comprehensive policies and strategic plans for proactive cyber defense operations. Ensure these policies align with emerging threats and organizational objectives
• SOC/NOC Framework Development: Design and define SOC/NOC operational frameworks specific to the CDAO’s mission and capabilities. Establish guidelines that programs across the organization can leverage for monitoring, incident response, and proactive threat detection
• Cyber Defense Expertise: Provide hands-on expertise in defensive cyber operations, with deep experience in Network Operations Centers (NOC), Security Operations Centers (SOC), and penetration testing (Pentest). Use real-world experience to guide and improve defense mechanisms and responses
• Purple Team Engagement: Actively collaborate with the PCB (Proactive Cyber Defense) group and CDAO’s Purple Team to test, evaluate, and enhance defensive cyber strategies. Ensure integration of offensive and defensive capabilities to maintain a robust cybersecurity posture
• Team Integration: Support the growth of the larger Proactive Cyber Defense team within the CDAO. Contribute to team building, knowledge sharing, and the development of best practices for real-time cyber threat detection and mitigation
• Dashboard and Tool Design: Lead efforts to design cybersecurity dashboards for real-time monitoring of security operations. Develop tools and metrics to track performance, identify anomalies, and provide a comprehensive view of the organization's cyber defenses
• Threat Detection & Incident Response: Establish proactive defense mechanisms that detect, analyze, and respond to threats in real-time. Collaborate with internal teams to ensure that cyber defense operations are tightly integrated with broader organizational goals
• Cross-functional Collaboration: Work with data scientists, AI engineers, and cybersecurity professionals to build an integrated approach to cybersecurity, utilizing data and AI tools to enhance proactive defense capabilities

Preferred Qualifications

• At least 7-10 years of experience in defensive cyber operations, including hands-on roles in NOC, SOC, and penetration testing
• Proven experience working within a Purple Team or similar operational environment, integrating offensive and defensive strategies
• Experience in policy development and the strategic implementation of cybersecurity operations, particularly within government or defense organizations
• Deep understanding of NOC/SOC architecture and best practices for cyber threat detection and response
• Advanced knowledge in penetration testing methodologies and tools
• Experience in creating real-time dashboards for cyber defense operations
• Proficiency in cybersecurity frameworks such as NIST, MITRE ATT&CK, and ISO 27001