Senior Cloud Security Engineer - SIEM & cATO Expert

Dark Wolf; Washington (District of Columbia); Hybrid; USD 155,000 - 180,000; Full time

Job summary

Dark Wolf in the Washington DC metro area seeks a Senior Cybersecurity Engineer to join a collaborative team focused on SIEM validation, continuous exposure management, and continuous Authorization to Operate (cATO) support for cloud-based information systems. You will perform advanced technical evaluations, develop detection rules, and coordinate with system administrators and cloud engineers.

The role requires 10+ years of cybersecurity experience, AWS and Splunk expertise, and an active Top

Qualifications

• Bachelor’s Degree in Computer Science, Cybersecurity, or a related field.
• 10+ years of Cybersecurity experience focusing on SIEM validation, tuning, and AWS-integrated analytics.
• Hands-on knowledge of AWS and Splunk.
• Active IAT Level 2 certification (e.g., Security+ CE, SSCP, CCNA Security).
• Experience evaluating information systems design, containerized apps, and cloud architecture.
• Experience using automated tools to monitor cloud environments for configuration drift against Security Requirements Guides.

Responsibilities

• Conduct technical evaluations of information systems design, containerized applications, and cloud architecture.
• Validate log ingestion across IaaS, OS, and application layers (AWS CloudTrail, VPC Flow Logs, GuardDuty).
• Develop, test, and deploy custom detection rulesets within the SIEM.
• Monitor AWS environments for configuration drift with automated posture assessment tools.
• Ingest IaC (Terraform) and docs to identify compliance gaps for cATO.
• Support continuous exposure management and cATO workflows for real-time authorization.
• Coordinate security control implementation and tuning with admins and cloud engineers.

Skills

SIEM validation

Tuning

Behavioral analytics

Continuous exposure management

cATO support

Education

Bachelor’s Degree in Computer Science/Cybersecurity

Tools

AWS

Splunk

Job description

Dark Wolf in the Washington DC metro area seeks a Senior Cybersecurity Engineer to join a collaborative team focused on SIEM validation, continuous exposure management, and continuous Authorization to Operate (cATO) support for cloud-based information systems. You will perform advanced technical evaluations, develop detection rules, and coordinate with system administrators and cloud engineers.

The role requires 10+ years of cybersecurity experience, AWS and Splunk expertise, and an active Top