Cloud Security Engineer (Mid-level)

About the position

Dark Wolf Solutions is seeking a Mid-Level Cloud Security Engineer to support the Unified Platform Cyber Operations & Security Center (COSC) in San Antonio, TX. The Cloud Security Engineer will assist in securing cloud-native and hybrid infrastructure by implementing security controls, monitoring cloud environments, supporting vulnerability management, and collaborating with development and operations teams to enhance platform resilience. This position provides an opportunity to apply cloud security expertise in a highly mission-focused, DevSecOps-driven environment supporting classified and unclassified workloads.

Responsibilities

• Implement and maintain security controls across AWS GovCloud, Azure Government, and/or classified cloud environments.
• Support the assessment and hardening of Kubernetes clusters, cloud-native services, and containerized workloads.
• Apply Zero Trust Architecture (ZTA) principles to cloud identity, access control, and network segmentation strategies.
• Conduct vulnerability scans and risk assessments of cloud infrastructure, reporting findings and supporting remediation efforts.
• Assist in deploying and tuning cloud-native security services such as AWS GuardDuty, Inspector, and Config Rules.
• Contribute to the integration of security monitoring and telemetry into COSC’s SIEM and observability frameworks.
• Collaborate with DevSecOps teams to embed security into CI/CD pipelines and Infrastructure as Code (IaC) workflows.
• Assist in incident response activities related to cloud security events, including analysis, containment, and recovery.
• Ensure compliance with DoD cybersecurity policies and standards, including RMF, STIGs, and NIST guidelines.
• Support preparation of security documentation, such as System Security Plans (SSPs) and Authorization to Operate (ATO) artifacts.

Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related technical field, or equivalent industry experience.
• Minimum of 3–5 years of experience in cybersecurity or cloud security engineering.
• Hands-on experience securing AWS, Azure, and/or GCP environments, including IAM configuration, encryption, and monitoring.
• Familiarity with Kubernetes security concepts and securing containerized workloads.
• Understanding of cloud networking, security group management, VPNs, and VPC configurations.
• Familiarity with security compliance frameworks such as NIST 800-53, FedRAMP, and DoD STIGs.
• Ability to analyze vulnerability scan results and assist in risk mitigation efforts.
• US Citizenship required with an active Secret clearance and eligibility for Top Secret/SCI.

Nice-to-haves

• Cloud-focused certifications such as AWS Certified Solutions Architect, AWS Security Specialty, or Microsoft Azure Security Engineer Associate.
• Experience with cloud-native security platforms such as Prisma Cloud, AWS Security Hub, or Azure Sentinel.
• Familiarity with Infrastructure as Code (IaC) tools such as Terraform or CloudFormation.
• Experience supporting security operations in Department of Defense or Intelligence Community environments.
• Exposure to Continuous Authorization to Operate (cATO) or RMF modernization initiatives.

Benefits

• Hybrid model with a mix of remote and on-site support; on-site presence required for classified system activities.