Cloud Security Specialist

Job Title: Cloud Security Specialist - SOCEUR

Job Category: Information Technology

Time Type: Full time

Minimum Clearance Required to Start: TS/SCI

Employee Type: Regular

Percentage of Travel Required: Up to 10%

Type of Travel: Local

* * *

The Opportunity:

As a CACI Cloud Security Specialist to serve as a hands-on defender for a mission-critical, multi-level security ecosystem on Google Cloud Platform (GCP). This role supports the Special Operations Command Europe (SOCEUR) Hybrid Threat Action Platform (HTAP) program team and is responsible for the day-to-day security posture, including threat detection, vulnerability management, and incident response. The individual will leverage cloud-native tools to monitor suspicious activity, investigate security alerts, and enforce Zero Trust policies. The individual will interact regularly with DevSecOps and platform engineers to implement security best practices and protect workloads, endpoints, and infrastructure for Allied, partner, and US operations.

 Responsibilities:

• Act as a primary responder for security incidents, leading threat mitigation efforts, performing root-cause analysis, and documenting findings.
• Proactively monitor for suspicious activity across GCP, prioritizing alerts from Google Security Command Center and other security tools, and initiating investigations.
• Develop and tune detection rules and automated response actions using SOAR (Security Orchestration, Automation, and Response) and other scripting capabilities.
• Implement and manage vulnerability scanning for cloud configurations and container pipelines, collaborating with engineering teams to remediate findings and prevent misconfigurations.
• Audit and enforce IAM policies, VPC Service Controls, and encryption controls to ensure compliance with security baselines (e.g., NIST, CIS Benchmarks).
• Assist in defining and verifying the customer-side of the cloud Shared Responsibility Model, ensuring data classification, endpoint security, and access controls are properly implemented.
• Utilize unified security platforms (e.g., SIEM/SOAR) to automate security tasks, correlate risk data, and perform rapid searches across security telemetry

Qualifications:

Required:

• Must be a US Citizen possessing an active TS/SCI security clearance.
• • Bachelor's degree in Cybersecurity, Computer Science, or a related field (or equivalent practical experience).
• • DoD 8570.01-M / DoD 8140 CSSP Analyst (or higher) baseline certification (e.g., CYSA+, CEH, CISSP).