Emerging Cybersecurity Subject Matter Expert and Analyst

Company Summary

Arlo Solutions (Arlo) is an information technology consulting services company that specializes in delivering technology solutions. Our reputation reflects the high quality of the talented Arlo Solutions team and the consultants working in partnership with our customers. Our mission is to understand and meet the needs of both our customers and consultants by delivering quality, value-added solutions. Our solutions are designed and managed to not only reduce costs, but to improve business processes, accelerate response time, improve services to end-users, and give our customers a competitive edge, now and into the future. 

Position Overview

Arlo is in search of a Proactive Cyber Defensive Subject Matter Expert (SME) to deliver consistent, responsive, and technical Cyber Security analysis within the defensive cybersecurity landscape. The Defensive Cyber SME will play a critical role within the Chief Data and Artificial Intelligence Office (CDAO) for the Office of the Secretary of Defense. They will collaborate closely with the CDAO Chief Information Officer (CIO) to define proactive defensive cyber operations for the enterprise. This expert will lead efforts to shape policies, strategies, and operational frameworks to strengthen the organization's cybersecurity posture. The SME will be instrumental in guiding CDAO’s approach to Network Operations Centers (NOC), Security Operations Centers (SOC), penetration testing (Pentest), and real-time cyber defense initiatives. This position offers the opportunity to lead the development of cutting-edge defensive cyber operations within the CDAO, influencing the future of cybersecurity across the Office of the Secretary of Defense. The Proactive Cyber Defensive SME will be a key player in shaping proactive defense strategies, driving real-world impact in safeguarding critical data and systems.

Work Location

Primarily remote. Will be required to come into the office for specific meetings as needed. 

Job Responsibilities and/or Success Factors

· Support the CDAO CIO with expert knowledge of defensive cyber, policies, and processes.

· Lead studies and assessments to identify gaps in the organizations cyber operations posture and recommend mitigations.

· Foster partnerships with stakeholders across the CDAO and develop action plans.

· Consultation with Subject Matter Experts: Engage with cybersecurity and technology SMEs across government and industry to assess potential threats in the evolving cyber landscape.

· Policy and Strategy Development: Work with the CDAO CIO to develop comprehensive policies and strategic plans for proactive cyber defense operations. Ensure these policies align with emerging threats and organizational objectives.

· SOC/NOC Framework Development: Design and define SOC/NOC operational frameworks specific to the CDAO’s mission and capabilities. Establish guidelines that programs across the organization can leverage for monitoring, incident response, and proactive threat detection.

· Cyber Defense Expertise: Provide hands-on expertise in defensive cyber operations, with deep experience in Network Operations Centers (NOC), Security Operations Centers (SOC), and penetration testing (Pentest). Use real-world experience to guide and improve defense mechanisms and responses.

· Purple Team Engagement: Actively collaborate with the PCB (Proactive Cyber Defense) group and CDAO’s Purple Team to test, evaluate, and enhance defensive cyber strategies. Ensure integration of offensive and defensive capabilities to maintain a robust cybersecurity posture.

· Team Integration: Support the growth of the larger Proactive Cyber Defense team within the CDAO. Contribute to team building, knowledge sharing, and the development of best practices for real-time cyber threat detection and mitigation.

· Dashboard and Tool Design: Lead efforts to design cybersecurity dashboards for real-time monitoring of security operations. Develop tools and metrics to track performance, identify anomalies, and provide a comprehensive view of the organization's cyber defenses.

· Threat Detection & Incident Response: Establish proactive defense mechanisms that detect, analyze, and respond to threats in real-time. Collaborate with internal teams to ensure that cyber defense operations are tightly integrated with broader organizational goals.

· Cross-functional Collaboration: Work with data scientists, AI engineers, and cybersecurity professionals to build an integrated approach to cybersecurity, utilizing data and AI tools to enhance proactive defense capabilities.

Education and Minimum Qualifications

· Must have a current and active Secret security clearance.

· Master’s degree in a related field from an accredited university/college.

· Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or related field.

· Minimum 5 years of combined Joint, Interagency, OSD, or Service Headquarters experience performing work related to task area.

· Minimum 5 years of experience using communication skills, both written and oral, to include preparation of written products for senior leader (general officer/flag officer/senior executive service level).

· Ability to communicate complex cybersecurity concepts to both technical and non-technical stakeholders, including senior leadership.

· Must be comfortable in outward-facing roles, including presenting to senior leadership and participating in external vendor discussions.

Desired Qualifications

· At least 7-10 years of experience in defensive cyber operations, including hands-on roles in NOC, SOC, and penetration testing.

· Proven experience working within a Purple Team or similar operational environment, integrating offensive and defensive strategies.

· Experience in policy development and the strategic implementation of cybersecurity operations, particularly within government or defense organizations.

· Deep understanding of NOC/SOC architecture and best practices for cyber threat detection and response.

· Advanced knowledge in penetration testing methodologies and tools.

· Experience in creating real-time dashboards for cyber defense operations.

· Proficiency in cybersecurity frameworks such as NIST, MITRE ATT&CK, and ISO 27001.

AAP Statement

We are proud to be an Affirmative Action and Equal Opportunity Employer and as such, we evaluate qualified candidates in full consideration without regard to race, color, religion, sex, sexual orientation, gender identity, marital status, national origin, age, disability status, protected veteran status, and any other protected status.