Senior Cloud Security Engineer - SIEM & cATO

BuddoBot Inc.; Washington (District of Columbia); Hybrid; USD 155,000 - 180,000; Full time

Benefits offered by this job

Hybrid work schedule

Job summary

Dark Wolf in the Washington DC metro area is seeking a Senior Cybersecurity Engineer to join a collaborative team to develop, manage, and maintain the security posture of cloud-based information systems with a focus on SIEM validation, continuous exposure management, and cATO support.

The role will be hybrid, based in the DC area, requiring 10+ years of cybersecurity experience, AWS and Splunk expertise, and US citizenship with an active Top Secret clearance.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or a related field.
• 10+ years of cybersecurity experience focusing on SIEM validation and cATO support.
• Hands-on knowledge of AWS and Splunk.
• Active U.S. citizenship with Top Secret clearance.
• Experience evaluating information systems design, containers, and cloud architecture.
• Ability to communicate technical topics clearly and concisely.

Responsibilities

• Evaluate information systems design, containerized apps, and cloud architecture for security and compliance.
• Validate log ingestion across AWS IaaS, OS, and applications; ensure security controls.
• Develop, test, and deploy custom SIEM detection rules.
• Use automated cloud security posture tools to monitor AWS configurations.
• Leverage RMF tools to ingest IaC (Terraform) and map to cATO requirements.
• Support continuous exposure management and cATO workflows.
• Coordinate security control implementation with sysadmins and cloud engineers.

Skills

AWS

Splunk

SIEM validation

Threat analytics

Cloud security

Written communication

Security compliance

Education

Bachelor's Degree in Computer Science or related field

Tools

Terraform

Kubernetes

Docker

RMF tools

Job description

Dark Wolf in the Washington DC metro area is seeking a Senior Cybersecurity Engineer to join a collaborative team to develop, manage, and maintain the security posture of cloud-based information systems with a focus on SIEM validation, continuous exposure management, and cATO support.

The role will be hybrid, based in the DC area, requiring 10+ years of cybersecurity experience, AWS and Splunk expertise, and US citizenship with an active Top Secret clearance.