Senior Cybersecurity Engineer - Cloud SIEM & cATO

Openkyber; United States; Hybrid; USD 155,000 - 180,000; Full time

Job summary

Dark Wolf is seeking a Senior Cybersecurity Engineer to join a collaborative team to maintain the security posture of cloud-based information systems, focusing on SIEM validation, continuous exposure management, and cATO support. The role is based in the Washington DC Metro area with a hybrid schedule.

Responsibilities include evaluating cloud architectures, validating log ingestion across AWS services, and developing SIEM detection rules.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or related field.
• Active Top Secret clearance required.
• IAT Level 2 certification highly preferred.

Responsibilities

• Conduct technical evaluations of cloud architectures and containerized apps to ensure security and architecture alignment.
• Validate log ingestion across IaaS, OS, and application layers (AWS CloudTrail, GuardDuty, etc.).
• Develop, test, and deploy SIEM detection rulesets.
• Monitor cloud environments for configuration drift using automated tools and RMF workflows.
• Support continuous exposure management and cATO processes to maintain real-time authorization.

Skills

SIEM validation

AWS

Splunk

cATO focus

Education

Bachelor's degree in Computer Science or Cybersecurity or related field

Active Top Secret clearance

IAT Level 2 certification

Tools

Terraform

GuardDuty

CloudTrail

VPC Flow Logs

Job description

Dark Wolf is seeking a Senior Cybersecurity Engineer to join a collaborative team to maintain the security posture of cloud-based information systems, focusing on SIEM validation, continuous exposure management, and cATO support. The role is based in the Washington DC Metro area with a hybrid schedule.

Responsibilities include evaluating cloud architectures, validating log ingestion across AWS services, and developing SIEM detection rules.