Senior Cloud Technical Project Manager

Cherokee Federal; Almont (CO); On-site; USD 165,000 - 170,000; Full time

Benefits offered by this job

Medical, Dental, Vision

401K

Other benefits as provided

Job summary

Criterion Systems, LLC, a Cherokee Federal company, seeks a Senior Cloud Technical PM/Senior Cloud Security Operations Lead to secure NSF cloud environments and advance security maturity across SIEM, CSPM, and incident response.

You will own Splunk ES content, Prisma Cloud outcomes, and AWS logging integration, while guiding a team of analysts and engineers. Collaboration with platform, network, and application teams is essential to enforce least privilege, encryption, and secure configurations.

Qualifications

• 7+ years of experience in cybersecurity, cloud security, or security operations, including 3+ years leading technical teams.
• Hands-on experience securing and operating production cloud environments (AWS/Azure; GCP acceptable).
• Strong experience with SIEM operations, log onboarding, correlation rules, alert tuning, and investigative workflows.
• Experience with cloud incident response, including evidence handling and root-cause analysis.
• Working knowledge of cloud IAM, networking, encryption, key management, and secure service configurations.
• Experience with vulnerability management tools and coordinating remediation across engineering teams.

Responsibilities

• Lead cloud security operations for NSF AWS environments, including triage, investigation, containment, and recovery.
• Own Splunk Enterprise Security content and operations, including CIM alignment, correlation searches, and reporting.
• Own Prisma Cloud CSPM outcomes, including posture baselines, policy standards, and remediation workflows.
• Engineer and mature AWS logging and detection coverage; integrate CloudTrail, VPC Flow Logs, Route 53 Resolver logs, ALB/ELB logs, AWS Config, CloudWatch, GuardDuty, and Security Hub into Splunk ES and Prisma Cloud.
• Lead detection engineering mapped to MITRE ATT&CK; improve detection fidelity and reduce false positives.
• Define and execute AWS incident response playbooks and escalation paths; ensure evidence capture and post-incident actions.
• Drive continuous monitoring and compliance with FISMA and NIST 800-53; support audits with evidence packages.
• Partner with cloud platform, network, and application teams to enforce guardrails (IAM least privilege, MFA, KMS, segmentation, centralized logging).
• Prioritize remediation of misconfigurations and security findings; automate workflows where possible.

Skills

AWS/Azure security experience

SIEM operations

Incident response

Detection engineering

Cloud security operations

Leadership

Public Trust

Strong communication

Education

Bachelor's degree in a related field

Tools

Splunk ES

Prisma Cloud

AWS Config

CloudTrail

VPC Flow Logs

CloudWatch

GuardDuty

Security Hub

Job description

Senior Cloud Technical PM/Senior Cloud Security Operations Lead

This position requires a Public Trust or ability to acquire a Public Trust

The Senior Cloud Technical Manager leads cloud-focused security operations supporting the National Science Foundation (NSF). This position owns technical execution across cloud security monitoring, incident response, vulnerability management, and secure cloud operations. The role drives maturity in detection engineering, automation, governance, and compliance while leading a team responsible for protecting NSF cloud environments and enabling mission delivery through secure, reliable, and scalable operations.

Compensation & Benefits:

Estimated Starting Salary Range : $165,000–$170,000

Pay commensurate with experience.

Full-time benefits include Medical, Dental, Vision, 401K, and other possible benefits as provided. Benefits are subject to change with or without notice.

Responsibilities Include:

• Lead cloud security operations for NSF AWS environments, including triage, investigation, containment, and recovery.
• Own Splunk Enterprise Security (ES) content and operations, including data onboarding, Common Information Model (CIM) alignment, correlation searches, notable event tuning, risk-based alerting (RBA), dashboards, and reporting.
• Own Prisma Cloud Cloud Security Posture Management (CSPM) outcomes, including posture baselines, policy standards and exceptions, remediation workflows, and risk-reduction tracking.
• Engineer and mature AWS logging and detection coverage. Integrate and operationalize CloudTrail, VPC Flow Logs, Route 53 Resolver logs, ALB/ELB logs, AWS Config, CloudWatch, GuardDuty, and Security Hub into Splunk ES and Prisma Cloud.
• Lead detection engineering mapped to MITRE ATT&CK. Improve detection fidelity, reduce false positives, and drive use-case lifecycle management.
• Define and execute AWS incident response playbooks and escalation paths. Ensure evidence capture, timeline reconstruction, and post-incident corrective actions.
• Drive continuous monitoring and compliance alignment with federal requirements, including FISMA and NIST 800-53. Support audits through repeatable evidence packages.
• Partner with cloud platform, network, and application teams to implement security guardrails, including IAM least privilege, MFA, KMS encryption, segmentation, centralized logging, and secure configurations.
• Prioritize and track remediation of misconfigurations and security findings identified through Prisma Cloud, AWS services, and Splunk ES investigations.
• Automate key security workflows where possible, including enrichment, ticketing, evidence capture, and containment actions using scripting and integration patterns.
• Establish operational metrics and reporting cadence, including MTTD, MTTR, detection coverage, backlog, and security posture trends.
• Manage team performance, technical quality, and delivery commitments while mentoring analysts and engineers.
• Participate in after-hours escalation and on-call activities as needed.
• Perform other job-related duties as assigned.

Experience, Education, Skills, Abilities Requested:

• 7+ years of experience in cybersecurity, cloud security, or security operations, including 3+ years leading technical teams.
• Hands-on experience securing and operating production cloud environments. AWS and Azure experience required; GCP experience is acceptable.
• Strong experience with SIEM operations, log onboarding, correlation rules, alert tuning, and investigative workflows.
• Experience with cloud incident response, including evidence handling and root-cause analysis.
• Working knowledge of cloud IAM, networking, encryption, key management, and secure service configurations.
• Experience with vulnerability management tools and coordinating remediation across engineering teams.
• Ability to write clear operational documentation and deliver concise, executive-ready status reporting.
• Security-first technical leadership with decisive incident-command capabilities.
• Strong prioritization and risk-based decision-making skills.
• Ability to drive effective execution across technical and business teams.
• Clear communication skills with both technical teams and senior stakeholders.
• Continuous-improvement mindset focused on measurable outcomes.
• Public Trust preferred.
• Must pass pre-employment qualifications of Cherokee Federal.

Company Information:

Criterion Systems, LLC, a Cherokee Federal company

Criterion Systems falls under Cherokee Federal. The position supports the National Science Foundation (NSF) and its cloud security mission.

Cherokee Federal is the division of tribally owned federal contracting companies owned by Cherokee Nation Businesses. As a trusted federal partner, Cherokee Federal companies support government missions by delivering services and solutions to federal customers.

#CherokeeFederal #LI-SM2 #AppC2

Similar Searchable Job Titles:

• Cloud Security Manager
• Senior Cloud Security Manager
• Cloud Security Operations Manager
• Cybersecurity Operations Manager
• Senior Security Operations Manager
• AWS Security Manager
• Cloud SOC Manager
• Senior Cloud Security Operations Lead

Keywords:

• AWS, Cloud Security
• Azure
• Splunk ES, Prisma Cloud
• CSPM
• SIEM
• Incident Response
• Detection Engineering
• MITRE ATT&CK
• CloudTrail
• VPC Flow Logs
• AWS Config
• CloudWatch
• GuardDuty
• Security Hub
• IAM
• Public Trust
• Cherokee Federal is a military friendly employer. Veterans and active military transitioning to civilian status are encouraged to apply.

Legal Disclaimer

Cherokee Federal is an equal opportunity employer. Please visit cherokee-federal.com/careers for information regarding our Affir¬ mative Action and Equal Opportunity Employer Statement, Accommodation request, and Presidential EO 14042 Notice.