Cloud Security Specialist - SOCEUR

CACI International

1d•$105,100 - $231,100•Hybrid

About The Position

As a CACI Cloud Security Specialist, you will serve as a hands-on defender for a mission-critical, multi-level security ecosystem on Google Cloud Platform (GCP). This role supports the Special Operations Command Europe (SOCEUR) Hybrid Threat Action Platform (HTAP) program team and is responsible for the day-to-day security posture, including threat detection, vulnerability management, and incident response. You will leverage cloud-native tools to monitor suspicious activity, investigate security alerts, and enforce Zero Trust policies. You will interact regularly with DevSecOps and platform engineers to implement security best practices and protect workloads, endpoints, and infrastructure for Allied, partner, and US operations.

Requirements

Must be a US Citizen possessing an active TS/SCI security clearance.
Bachelor's degree in Cybersecurity, Computer Science, or a related field (or equivalent practical experience).
DoD 8570.01-M / DoD 8140 CSSP Analyst (or higher) baseline certification (e.g., CYSA+, CEH, CISSP).
5+ years of hands-on experience in a security role such as Cloud Security, Security Engineering, or a Security Operations Center (SOC) Analyst.
Practical experience applying security frameworks (NIST, CIS, ISO 27001) and benchmarks to cloud-native environments.
Proficiency with cloud security tools (e.g., Google Security Command Center, Cloud Armor, Cloud KMS) and scripting languages like Python for automation.
Experience with threat analysis, incident response, and using SIEM/SOAR platforms.
One of the following advanced certifications: Google Cloud Professional Security Engineer, Google Cloud Professional Security Operations Engineer, or Certified Cloud Security Professional (CCSP).

Nice To Haves

Experience with threat modeling, penetration testing, or conducting attack simulations.
Hands-on experience using Infrastructure as Code (IaC) tools like Terraform to automate security controls.
Experience working in a DoD, FedRAMP, or other highly regulated cloud environment.

Responsibilities

Act as a primary responder for security incidents, leading threat mitigation efforts, performing root-cause analysis, and documenting findings.
Proactively monitor for suspicious activity across GCP, prioritizing alerts from Google Security Command Center and other security tools, and initiating investigations.
Develop and tune detection rules and automated response actions using SOAR (Security Orchestration, Automation, and Response) and other scripting capabilities.
Implement and manage vulnerability scanning for cloud configurations and container pipelines, collaborating with engineering teams to remediate findings and prevent misconfigurations.
Audit and enforce IAM policies, VPC Service Controls, and encryption controls to ensure compliance with security baselines (e.g., NIST, CIS Benchmarks).
Assist in defining and verifying the customer-side of the cloud Shared Responsibility Model, ensuring data classification, endpoint security, and access controls are properly implemented.
Utilize unified security platforms (e.g., SIEM/SOAR) to automate security tasks, correlate risk data, and perform rapid searches across security telemetry.