Senior Cybersecurity Engineer — Cloud & SIEM Lead (Hybrid)

Darkwolfsolutions; Washington (District of Columbia); Hybrid; USD 155,000 - 180,000; Full time

Job summary

Dark Wolf is seeking a Senior Cybersecurity Engineer to join a collaborative team to develop, manage, and maintain the security posture of cloud-based information systems with a focus on SIEM validation, continuous exposure management, and continuous Authorization to Operate (cATO) support in the Washington DC Metro area.

This role emphasizes advanced technical evaluations, detection engineering, cloud-architecture security, and close coordination with system administrators and cloud engineers,

Qualifications

• Bachelor’s Degree in Computer Science, Cybersecurity, or a related field.
• 10+ years of relevant Cybersecurity experience focusing on SIEM validation, tuning, behavioral analytics with AWS, continuous exposure management, and cATO support.
• Hands-on knowledge with AWS and Splunk.
• IAT Level 2 certification with preference for higher-level certifications.
• Experience evaluating information systems design, containerized applications, and cloud architecture.

Responsibilities

• Conduct technical evaluations of information systems design, containerized applications, and cloud architecture.
• Validate log ingestion across IaaS, OS, and application layers (AWS CloudTrail, VPC Flow Logs, GuardDuty).
• Develop, test, and deploy custom detection rules within the SIEM.
• Use automated cloud security posture tools to monitor AWS for configuration drift.
• Leverage RMF tools to ingest IaC (Terraform) and docs to identify compliance gaps and accelerate cATO.
• Support continuous exposure management and cATO workflows for real-time authorization.
• Coordinate security control implementation and detection tuning with admins and cloud engineers.

Job description

Dark Wolf is seeking a Senior Cybersecurity Engineer to join a collaborative team to develop, manage, and maintain the security posture of cloud-based information systems with a focus on SIEM validation, continuous exposure management, and continuous Authorization to Operate (cATO) support in the Washington DC Metro area.

This role emphasizes advanced technical evaluations, detection engineering, cloud-architecture security, and close coordination with system administrators and cloud engineers,