AI-Driven Cloud Threat Detection Engineer (DoD)

Dark Wolf Solutions, LLC; Ogden (UT); On-site; USD 100,000 - 160,000; Full time

Job summary

Dark Wolf Solutions, LLC is seeking a Threat Detection Engineer to design, build, test, and deploy detection logic using a "Detection-as-Code" approach across on-prem and AWS GovCloud environments, focusing on high-fidelity alerts and automated response.

Role emphasizes threat hunting, AI-assisted analysis, and incident response automation, with deployment at Hill AFB in Ogden, Utah. Must be a US citizen with TS/SCI clearance and willing to be on-site.

Qualifications

• 4+ years of relevant experience.
• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• US Citizenship with an active Top Secret/SCI clearance is required.
• Experience with Splunk and ELK Stack for detection engineering.

Responsibilities

• Design, build, test, and deploy detection logic across on-prem and AWS GovCloud environments.
• Write and tune detection signatures targeting cloud-native vectors and host-level behavior.
• Ingest, normalize, and analyze AWS security logs and on-prem telemetry into SIEM/datalake.
• Proactively hunt for adversary techniques and reduce alert fatigue through improved fidelity.
• Develop automated remediation and incident response playbooks in GitLab pipelines.

Skills

Threat hunting

Detection engineering

GitLab CI/CD

AI/ML for detection

Education

Bachelor’s degree in Computer Science or IT

DoD CSSP Certification (CEH/CCNA Security/GCIH/CySA+)

US Citizenship with TS/SCI clearance

Tools

Splunk Enterprise

ELK Stack

Terraform/ IaC

Cloud security (AWS GovCloud)

Job description

Dark Wolf Solutions, LLC is seeking a Threat Detection Engineer to design, build, test, and deploy detection logic using a "Detection-as-Code" approach across on-prem and AWS GovCloud environments, focusing on high-fidelity alerts and automated response.

Role emphasizes threat hunting, AI-assisted analysis, and incident response automation, with deployment at Hill AFB in Ogden, Utah. Must be a US citizen with TS/SCI clearance and willing to be on-site.