Cloud Security Engineer

About this role

Description:

Tyto Athene is seeking an enthusiastic Cloud Security Engineer to help our largest Federal client monitor and secure their rapidly expanding cloud footprint against would-be attackers. The successful candidate will have a passion for and experience with being the foremost Cloud Security expert in a large, enterprise SOC environment and augment the team’s knowledge and skills regarding AWS to develop alerting and response procedures for cloud events and perform cloud hunting, monitoring, and incident response.

Responsibilities:

• Perform cloud hunting and identify embedded threats effectively and efficiently
• Review and analyze cloud logs to bring relevance and context to the data
• Lead cloud incident response activities as they occur
• Develop a full set of cloud incident response playbooks
• Work with stakeholders to ensure full visibility into workloads running in the cloud
• Ensure all cloud logs are onboarded to the SIEM tool and the correct events are logged
• Develop and implement a full set of monitoring use cases to enable DOJ security tools to immediately and automatically detect cloud threats
• Continuously tune security tools for optimization, i.e., maximum blocking with minimal false positives
• Devise and implement additional KPIs and metrics that help DOJ monitor the overall health of this function
• Ensure and enable DOJ’s participation in threat information-sharing initiatives across the USG
• Assist the engineering team with the deployment, configuration, and maintenance of cloud-based SOC tools, technologies, applications, and solutions
• Perform research and lead proof of concept efforts to determine where additional technologies may be necessary

Qualifications:

## Required:

• Able to work normal business hours (core) and occasional/limited on-call hours as requested by the client and/or as required by operational demands (e.g., during major incidents)
• Willingness to work at the client site in Washington DC at le...