Senior Cloud Security Engineer — SIEM & cATO Expert

Dark Wolf; Washington (District of Columbia); Hybrid; USD 155,000 - 180,000; Full time

Job summary

Dark Wolf in the Washington DC area is seeking a Senior Cybersecurity Engineer to join a collaborative team responsible for security posture of cloud-based systems. Focus areas include SIEM validation, continuous exposure management, and cATO support with a hybrid schedule.

Responsibilities include evaluating cloud architecture, validating log ingestion, developing detection rules, and leveraging RMF tools to map infrastructure as code to security requirements.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, or related field.
• 10+ years of relevant cybersecurity experience focusing on SIEM validation, tuning, analytics, and cATO support.
• Active AWS and Splunk experience with cloud security.
• US Citizenship and active Top Secret clearance preferred, with higher certifications desirable.

Responsibilities

• Evaluate information systems design, containerized apps, and cloud architecture for security and operational requirements.
• Validate log ingestion across IaaS, OS, and app layers (AWS CloudTrail, VPC Flow Logs, GuardDuty).
• Develop, test, and deploy custom SIEM detection rulesets.
• Use AI-assisted RMF tools to ingest Terraform and docs for compliant mapping.
• Support cATO workflows and continuous exposure management.

Skills

SIEM validation

Cloud security

Written communication

Security clearance

Education

Bachelor’s degree in CS/Cybersecurity

Tools

AWS

Splunk

Terraform

GuardDuty

Job description

Dark Wolf in the Washington DC area is seeking a Senior Cybersecurity Engineer to join a collaborative team responsible for security posture of cloud-based systems. Focus areas include SIEM validation, continuous exposure management, and cATO support with a hybrid schedule.

Responsibilities include evaluating cloud architecture, validating log ingestion, developing detection rules, and leveraging RMF tools to map infrastructure as code to security requirements.