Company Overview:
By Light Professional IT Services LLC readies warfighters and federal agencies with technology and systems engineered to connect, protect, and prepare individuals and teams for whatever comes next. Headquartered in McLean, VA, By Light supports defense, civilian, and commercial IT customers worldwide.
Position Overview:
Senior Security Subject Matter Expert (SME) to support secure cloud systems in Federal and DoD environments. This role is responsible for designing, implementing, and maintaining security controls across cloud infrastructure and cybersecurity operations systems, while supporting the secure development of AI/ML capabilities and compliance with industry and government standards.
The ideal candidate brings deep, hands-on cloud security and SOC engineering experience, a strong understanding of risk and compliance, and demonstrated ability to secure emerging technologies — including AI/ML systems, detection pipelines, and the products built on them.
Responsibilities:
- Design, implement, and maintain security controls across system development and operations.
- Secure AWS-based cloud environments, including STIG/NIST-aligned architectures and least-privilege IAM policies; provide working knowledge of Azure and/or Google Cloud.
- Perform system hardening, vulnerability scanning, monitoring, and incident response using tools such as Splunk, Security Onion, and Tenable.
- Analyze logs, develop alerts and detection content, and support forensic investigations and threat hunting.
- Support security architecture design and integration for new and existing systems, including infrastructure-as-code deployments (e.g., Terraform, GitLab CI/CD).
- Partner with engineering teams to embed security requirements throughout the AI/ML and cybersecurity product development lifecycle, from design through deployment.
- Perform security reviews of AI/ML models, pipelines, and training data prior to release, including adversarial risk, model integrity, data provenance, and anomaly-detection model validation (e.g., autoencoders, isolation forest).
- Support secure-by-design practices for AI-enabled SOC tooling and cybersecurity products, including threat modeling, secure code review, least-privilege data access, audit logging, and human-approval gates for AI-assisted actions.
- Provide support and oversight for systems, including:
- Patching selection and updates
- Training data security and integrity
- Network monitoring, access controls, and monitoring
- Review and approval of AI-related changes and updates
- Support compliance activities aligned with CMMC Level 2, SOC 2, and ISO/IEC 27001.
- Contribute to security documentation, risk assessments, and audit readiness efforts.
Required Experience/Qualifications:
- Bachelor's degree (or equivalent experience) plus 7+ years of relevant security experience, including SOC, incident response, or detection engineering
- Hands-on experience securing on-premise/AWS environments, including STIG/NIST-aligned architectures
- Experience with cloud security and enterprise security tools (e.g., Splunk, Security Onion, Tenable, or equivalent SIEM/vulnerability management platforms)
- Proficiency in Python for automation, security tooling, or ML-driven analytics
- Working knowledge of AI/ML system architectures and associated security risks (e.g., model integrity, data poisoning, adversarial inputs)
Preferred Experience/Qualifications:
- CISSP, CEH, C|CISO, or GIAC certifications (e.g., GIAC Cloud Penetration Tester)
- Experience with infrastructure-as-code and CI/CD pipelines (e.g., Terraform, GitLab CI/CD)
- Experience supporting Federal, DoD, or regulated environments, including CDM or similar federal vulnerability management programs
- Hands-on experience with AI/ML anomaly detection or analytics frameworks (e.g., Splunk MLTK/DSDL, scikit-learn, TensorFlow, MLflow, embeddings/RAG, vector databases)
- Experience contributing to AI/ML or cybersecurity product development, including secure design reviews or DevSecOps practices for ML pipelines
- ITIL, GICSP, or equivalent operations/compliance certifications
Special Requirements/Security Clearance:
- Active Top Secret clearance (SCI/Poly preferred, depending on program requirements)
