Senior Defensive Cyber Operations Engineer

BuddoBot Inc.; Ogden (UT); On-site; USD 90,000 - 145,000; Full time

Job summary

Dark Wolf Solutions is seeking a Defensive Cyber Operations Analyst to monitor systems continuously, detect malicious activity, and support containment and remediation across on-prem ELK and AWS GovCloud (Splunk). The role emphasizes AI-assisted threat analysis and rapid incident response, operating on-site at Hill AFB in Ogden, Utah.

Applicants should bring 4+ years of cybersecurity experience, hands-on exposure to Splunk/ELK, DoD policy familiarity, and a DoD CSSP certification.

Qualifications

• 4+ years of relevant cybersecurity experience including direct SOC / vSOC / CSSP incident response.
• 2+ years using Splunk Enterprise and ELK Stack for correlation and threat detection.
• Direct experience monitoring AWS GovCloud (CloudTrail, VPC Flow Logs, GuardDuty).
• Hands-on GitLab usage for CI/CD pipelines or DevSecOps workflows.
• 2+ years applying DoD cybersecurity requirements and assessment/authorization activities.
• DoD 8140/8570 CSSP Certification (CEH, Security+, GCIH, CySA+ or equivalent) required.
• Bachelor's degree in Computer Science, Information Technology, or related field.

Responsibilities

• Active monitoring, detection, and analysis across on-prem (ELK) and AWS GovCloud (Splunk).
• Use AI-assisted analysis and data correlation to triage security events and reduce response times.
• Perform vulnerability management actions and implement mitigations.
• Conduct intrusion analysis and suggest improvements for detection and mitigation.
• Participate in Root Cause Analysis and document mitigation efforts.
• Develop DCO tactics, techniques, and procedures (TTPs) and supporting docs.
• Identify security discrepancies and respond to incidents.
• Draft documentation for briefings, reports, and analyses.
• Participate in customer exercises; may require after-hours involvement.
• Adhere to policies, master plans, and schedules; complete training as required.

Skills

SOC incident response

Threat detection

AI/ML security tools

Cloud security

ELK Splunk

GitLab / DevSecOps

Education

Bachelor's degree in Computer Science/IT

Tools

Splunk Enterprise

ELK Stack

AWS GovCloud

GitLab

SPL / Kibana QL

Job description

Dark Wolf Solutions is seeking a Defensive Cyber Operations Analyst to monitor systems continuously, detect malicious activity, and support containment and remediation across on-prem ELK and AWS GovCloud (Splunk). The role emphasizes AI-assisted threat analysis and rapid incident response, operating on-site at Hill AFB in Ogden, Utah.

Applicants should bring 4+ years of cybersecurity experience, hands-on exposure to Splunk/ELK, DoD policy familiarity, and a DoD CSSP certification.