Threat Detection Engineer (Cloud Security)

Job overview

The Threat Detection Engineer (Cloud Security) role is fully onsite at Hill Air Force Base in Ogden, UT. The salary range is $100,000–$160,000 per year. Dark Wolf Solutions is seeking an engineer to build and deploy detection capabilities across on-premises and AWS GovCloud environments. The engineer develops high-fidelity detection logic, hunts for advanced threats, and automates response workflows. This work helps improve alert quality, reduce alert fatigue, and strengthen defensive cyber operations.

What you'll do

• Design, build, test, and deploy detection logic using Detection-as-Code
• write and maintain detection signatures for cloud, container, and host-level threats
• ingest and analyze AWS security logs and on-premises telemetry
• hunt for malicious activity and adversary techniques
• partner with operators and AWS engineers on automated remediation and response playbooks
• analyze false positives and negatives
• use AI-assisted analysis and machine learning features
• contribute to defensive cyber operations procedures, threat models, and documentation
• support vulnerability mitigations.

What we're looking for

Skills & competencies

threat detection engineer

cloud security

ogden ut

hill air force base

dark wolf solutions

$100k-$160k/year

detection-as-code

aws govcloud

splunk enterprise

elk stack

gitlab

threat hunting

top secret/sci

Work arrangement

• Weekend coverage required

Why this role

Requires US citizenship, an active Top Secret/SCI clearance, and a DoD 8140 IAT CSSP certification before hire.

About the employer

Dark Wolf Solutions is hiring for this role. Industry: Engineering Services. Sector: 54.