Cloud Security Specialist - SOCEUR

Job Title: Cloud Security Specialist - SOCEUR Job Category: Information Technology Time Type: Full time Minimum Clearance Required to Start: TS/SCI Employee Type: Regular Percentage of Travel Required: Up to 10% Type of Travel: Local \* \* \* **The Opportunity:** As a CACI Cloud Security Specialist to serve as a hands-on defender for a mission-critical, multi-level security ecosystem on Google Cloud Platform (GCP). This role supports the Special Operations Command Europe (SOCEUR) Hybrid Threat Action Platform (HTAP) program team and is responsible for the day-to-day security posture, including threat detection, vulnerability management, and incident response. The individual will leverage cloud-native tools to monitor suspicious activity, investigate security alerts, and enforce Zero Trust policies. The individual will interact regularly with DevSecOps and platform engineers to implement security best practices and protect workloads, endpoints, and infrastructure for Allied, partner, and US operations. **Responsibilities:** - Act as a primary responder for security incidents, leading threat mitigation efforts, performing root-cause analysis, and documenting findings. - Proactively monitor for suspicious activity across GCP, prioritizing alerts from Google Security Command Center and other security tools, and initiating investigations. - Develop and tune detection rules and automated response actions using SOAR (Security Orchestration, Automation, and Response) and other scripting capabilities. - Implement and manage vulnerability scanning for cloud configurations and container pipelines, collaborating with engineering teams to remediate findings and prevent misconfigurations. - Audit and enforce IAM policies, VPC Service Controls, and encryption controls to ensure compliance with security baselines (e.g., NIST, CIS Benchmarks). - Assist in defining and verifying the customer-side of the cloud Shared Responsibility Model, ensuring data classification, endpoint security, and access controls are properly implemented. - Utilize unified security platforms (e.g., SIEM/SOAR) to automate security tasks, correlate risk data, and perform rapid searches across security telemetry **Qualifications:** **Required:** - Must be a US Citizen possessing an active TS/SCI security clearance. - • Bachelor's degree in Cybersecurity, Computer Science, or a related field (or equivalent practical experience). - • DoD 8570.01-M / DoD 8140 CSSP Analyst (or higher) baseline certification (e.g., CYSA+, CEH, CISSP). - • 5+ years of hands-on experience in a security role such as Cloud Security, Security Engineering, or a Security Operations Center (SOC) Analyst. - • Practical experience applying security frameworks (NIST, CIS, ISO 27001) and benchmarks to cloud-native environments. - • Proficiency with cloud security tools (e.g., Google Security Command Center, Cloud Armor, Cloud KMS) and scripting languages like Python for automation. - • Experience with threat analysis, incident response, and using SIEM/SOAR platforms. - • One of the following advanced certifications: Google Cloud Professional Security Engineer, Google Cloud Professional Security Operations Engineer, or Certified Cloud Security Professional (CCSP). **Desired:** - Experience with threat modeling, penetration testing, or conducting attack simulations. - Hands-on experience using Infrastructure as Code (IaC) tools like Terraform to automate security controls. - Experience working in a DoD, FedRAMP, or other highly regulated cloud environment. - **What You Can Expect:** **A culture of integrity.** At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation. **An environment of trust.** CACI values the unique contributions that every employee brings to our company and our customers - every day. You’ll have t…