Senior Cybersecurity Engineer

Dark Wolf Solutions, LLC; Washington (District of Columbia); Hybrid; USD 155,000 - 180,000; Full time

Job summary

Dark Wolf Solutions, LLC seeks a Senior Cybersecurity Engineer to develop, manage, and maintain security postures for cloud-based systems with emphasis on SIEM validation, exposure management, and cATO support.

The role focuses on advanced evaluations, detection engineering, and cloud architecture security, with a hybrid schedule based in the Washington DC Metro area.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or related field.
• 10+ years of cybersecurity experience focusing on SIEM validation, tuning, and cATO support.
• Hands-on knowledge of AWS and Splunk.
• Active IAT Level 2 certification (e.g., Security+ CE, SSCP, CCNA Security).
• US Citizenship and an active Top Secret security clearance.
• Experience evaluating information systems design, containerized apps, and cloud architecture.

Responsibilities

• Conduct technical evaluations of information systems design, containerized applications, and cloud architecture, ensuring security and operational requirements map into the System/Enterprise Architecture.
• Validate efficacy of log ingestion across IaaS, OS, and application layers (AWS CloudTrail, VPC Flow Logs, GuardDuty).
• Develop, test, and deploy custom detection rulesets within the SIEM.
• Use automated cloud security posture tools to monitor AWS for configuration drift per Security Requirements Guide.
• Ingest infrastructure-as-code (Terraform) for automated compliance mapping to accelerate cATO.
• Support continuous exposure management and cATO workflows for real-time authorization.
• Coordinate security control implementation and detection tuning with admins and cloud engineers.

Skills

SIEM validation

Cloud security

Behavioral analytics

cATO support

AWS infrastructure

Log analysis

Written communication

Education

Bachelor's degree

Tools

AWS

Splunk

Job description

Dark Wolf is seeking a Senior Cybersecurity Engineer to join a collaborative team to develop, manage, and maintain the security posture of cloud‑based information systems with a focus on SIEM validation, continuous exposure management, and continuous Authorization to Operate (cATO) support. The successful candidate will support the team and customers through advanced technical evaluations, detection engineering, and cloud architecture security, ensuring high standards of security and compliance. This position is based out of the Washington DC Metro area with a hybrid schedule opportunity.

Responsibilities

• Conduct technical evaluations of information systems design, containerized applications, and cloud architecture, ensuring security and operational requirements map directly into the System/Enterprise Architecture.
• Validate the efficacy of log ingestion across IaaS, OS, and application layers (including AWS CloudTrail, VPC Flow Logs, and GuardDuty alerts).
• Develop, test, and deploy custom detection engineering rulesets within the SIEM.
• Utilize automated cloud security posture assessment tools to continuously monitor the AWS environment for configuration drift, ensuring strict adherence to the provided Security Requirements Guide.
• Leverage AI‑assisted RMF tools to ingest infrastructure‑as‑code (e.g., Terraform) and system documentation to rapidly identify compliance gaps, accelerating the cATO process.
• Support continuous exposure management and cATO workflows to maintain real‑time system authorization.
• Coordinate proper security control implementation and detection tuning with system administrators and cloud engineers.

Required Qualifications

• Bachelor’s Degree in Computer Science, Cybersecurity, or a related field.
• 10+ years of relevant Cybersecurity experience focusing on SIEM validation, tuning, behavioral analytics (integrated with AWS infrastructure), continuous exposure management, and cATO support.
• Hands‑on knowledge and experience with AWS and Splunk.
• Active IAT Level 2 certification (e.g., Security+ CE, SSCP, CCNA Security), with a strong preference for higher‑level certifications.
• Experience conducting technical evaluations of information systems design, containerized applications, and cloud architecture.
• Experience using automated tools to monitor cloud environments for configuration drift against Security Requirements Guides.
• Ability to use prior experience and knowledge to address new situations, especially during client interactions.
• Ability to communicate technical subjects using clear, concise, non‑technical language, including strong written communication, provision of written feedback on documents, and preparation of briefings.
• US Citizenship and an active Top Secret security clearance.

Desired Qualifications

• IAT Level 3 or higher certifications (e.g., CISSP, CASP+, CISM, GSLC).
• Advanced technical certifications relevant to the environment (e.g., AWS Certified Security – Specialty, Splunk Enterprise Security Certified Admin).
• Hands‑on experience using AI‑assisted RMF tools to ingest Infrastructure‑as‑Code (e.g., Terraform) for automated compliance mapping.
• Deep understanding of container security (e.g., Kubernetes, Docker) and securing DevSecOps pipelines.
• Experience giving technical guidance to cloud engineers and system administrators.

The salary range for this position is estimated to be between $155,000.00 - $180,000.00, commensurate with experience and technical skillset. Candidates at a Principal or Senior Principal (or equivalent) level will be considered.

We are proud to be an EEO/AA employer for Minorities/Women/Veterans/Disabled and other protected categories.

In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.

We are strictly looking for direct, full‑time W2 employees. We do not engage with third‑party staffing agencies, C2C, or 1099 independent contractors for this role.