Senior Cybersecurity Engineer with Security Clearance

Dark Wolf; Washington (District of Columbia); Hybrid; USD 155,000 - 180,000; Full time

Job summary

Dark Wolf in the Washington DC area is seeking a Senior Cybersecurity Engineer to join a collaborative team responsible for security posture of cloud-based systems. Focus areas include SIEM validation, continuous exposure management, and cATO support with a hybrid schedule.

Responsibilities include evaluating cloud architecture, validating log ingestion, developing detection rules, and leveraging RMF tools to map infrastructure as code to security requirements.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, or related field.
• 10+ years of relevant cybersecurity experience focusing on SIEM validation, tuning, analytics, and cATO support.
• Active AWS and Splunk experience with cloud security.
• US Citizenship and active Top Secret clearance preferred, with higher certifications desirable.

Responsibilities

• Evaluate information systems design, containerized apps, and cloud architecture for security and operational requirements.
• Validate log ingestion across IaaS, OS, and app layers (AWS CloudTrail, VPC Flow Logs, GuardDuty).
• Develop, test, and deploy custom SIEM detection rulesets.
• Use AI-assisted RMF tools to ingest Terraform and docs for compliant mapping.
• Support cATO workflows and continuous exposure management.

Skills

SIEM validation

Cloud security

Written communication

Security clearance

Education

Bachelor’s degree in CS/Cybersecurity

Tools

AWS

Splunk

Terraform

GuardDuty

Job description

Senior Cybersecurity Engineer Washington DC Metro Area is seeking a Senior Cybersecurity Engineer to join a collaborative team to develop, manage, and maintain the security posture of cloud-based information systems with a focus on SIEM validation, continuous exposure management, and continuous Authorization to Operate (cATO) support. The successful candidate will support your team and customer through advanced technical evaluations, detection engineering, and cloud architecture security, ensuring high standards of security and compliance. This position will be based out of the Washington DC Metro area with a hybrid schedule opportunity.

Responsibilities include but are not limited to:

• Conducting technical evaluations of information systems design, containerized applications, and cloud architecture, ensuring security and operational requirements map directly into the System/Enterprise Architecture.
• Validating the efficacy of log ingestion across IaaS, OS, and application layers (including AWS CloudTrail, VPC Flow Logs, and GuardDuty alerts).
• Developing, testing, and deploying custom detection engineering rulesets within the SIEM.
• Utilizing automated cloud security posture assessment tools to continuously monitor the AWS environment for configuration drift, ensuring strict adherence to the provided Security Requirements Guide.
• Leveraging AI-assisted RMF tools to ingest infrastructure-as-code (e.g., Terraform) and system documentation to rapidly identify compliance gaps, accelerating the cATO process.
• Supporting continuous exposure management and cATO workflows to maintain real-time system authorization.
• Coordinating proper security control implementation and detection tuning with system administrators and cloud engineers. Required Qualifications
• Bachelor’s Degree in Computer Science, Cybersecurity, or a related field.
• 10+ years of relevant Cybersecurity experience focusing on SIEM validation, tuning, behavioral analytics (integrated with AWS infrastructure), continuous exposure management, and cATO support.
• High level of hands‑on knowledge and experience with AWS and Splunk.
• Active IAT Level 2 certification (e.g., Security+ CE, SSCP, CCNA Security), with a strong preference for higher-level certifications.
• Demonstrated experience conducting technical evaluations of information systems design, containerized applications, and cloud architecture.
• Experience utilizing automated tools to monitor cloud environments for configuration drift against Security Requirements Guides.
• Ability to use prior experience and knowledge to address new situations, especially during interactions with clients.
• Ability to communicate on technical subjects using clear, concise, non‑technical language to include strong written communications, ability to provide written feedback on documents, and ability to prepare briefings.
• US Citizenship and an active Top Secret security clearance.
• Desired Qualifications
• IAT Level 3 or higher certifications (e.g., CISSP, CASP+, CISM, GSLC).
• Advanced technical certifications relevant to the environment (e.g., AWS Certified Security - Specialty, Splunk Enterprise Security Certified Admin).
• Hands‑on experience using AI-assisted RMF tools to ingest Infrastructure-as-Code (e.g., Terraform) for automated compliance mapping.
• Deep understanding of container security (e.g., Kubernetes, Docker) and securing DevSecOps pipelines.
• Demonstrated experience giving technical guidance to cloud engineers and system administrators. The salary range for this position is estimated to be between $155,000.00 - $180,000.00, commensurate on experience and technical skillset. We will consider candidates at a Principal or Senior Principal (or equivalent level).

We are proud to be an EEO/AA employer Minorities/Women/Veterans/Disabled and other protected categories. In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire. We are strictly looking for direct, full-time W2 employees. We do not engage with third‑party staffing agencies, C2C, or 1099 independent contractors for this role.