Dark Wolf is seeking a Senior Cybersecurity Engineer, Cloud Automation & Security Controls to join a collaborative team to assess and validate cybersecurity configurations and best practices of complex, cloud-based systems. The successful candidate will support both the Dark Wolf team and customer through advanced technical evaluations of cloud cybersecurity architecture best practices, ensuring high engineering standards of security and compliance. This position will be based out of the Washington DC Metro area and is onsite at customer locations. Responsibilities include but are not limited to:
- Develop recommendations to remediate cybersecurity program deficiencies and improve client cybersecurity processes, technologies, and configurations.
- Conduct technical evaluations of information systems design, containerized applications, and cloud architecture, ensuring security and operational requirements align with NIST and CNSS controls.
- Validate the efficacy of information system cybersecurity policies and procedures.
- Develop automated methods to monitor and measure risk and security compliance efforts.
- Utilize automated cloud security posture assessment tools to continuously monitor the AWS environment for configuration drift, ensuring strict adherence to the Cloud Computing Security Requirements Guide.
- Leverage AI-assisted tools to ingest infrastructure-as-code (e.g., Terraform) and system documentation to rapidly identify cybersecurity and compliance gaps.
- Draft and brief statements of preliminary or residual cybersecurity risks for system operation.
- Assess the design and effectiveness of existing security controls and work with solution and product development teams to identify, define, and document additional controls based on solution-specific or product-specific requirements.
Required Qualifications
- Bachelor’s Degree in Computer Science, Cybersecurity, or a related field.
- 5+ years of relevant Cybersecurity experience focusing on cybersecurity control assessment or implementation, penetration testing, or quality assurance testing.
- Active IAT Level 2 certification (i.e., Security+ CE, CySA+, CND, CCNA Security)
- Demonstrated experience conducting technical evaluations of information systems design, containerized applications, and cloud architecture.
- Ability to communicate on technical subjects using clear, concise, non-technical language to include strong written communications, ability to provide written feedback on documents, and ability to prepare briefings.
