Cloud Security GRC Consultant

Responsibilities

Work collaboratively within a fast paced Agile team environment

Stay up-to-date on the latest Google Cloud services and technologies

Implement security best practices for Google Cloud solutions

Serve as a key contributor for federal compliance requirements, including FedRAMP, NIST SP 800-53, and agency-specific security overlays

Support development and implementation of innovative methods to achieve compliance with government and commercial cybersecurity frameworks

Conduct detailed technical security control assessments against system components and configurations within the GCP environment, identifying gaps, risks, and recommended mitigations

Actively contribute to the development and finalization of authorization artifacts

Partner with cloud architecture and engineering teams to provide actionable compliance guidance, ensuring security is built-in from system design through deployment

Utilize Google Cloud native tools and features to aid in continuous monitoring (ConMon) activities, vulnerability management, and security posture management

Support reviews with the Authorizing Official (AO), security assessors (e.g., 3PAOs), and federal agency security teams during control assessments and authorization reviews

Develop clear, compelling Plan of Action and Milestones (POA&M) entries, helping the team communicate system risks, impact, and mitigation strategies to stakeholders

Support strategic consulting efforts on evolving federal cloud security policy and best practices

Preferred

Experience working within Agile teams

Experience working with Google Cloud compliance products such as Security Command Center and Assured Workloads

Hands-on experience with modern compliance automation, OSCAL, Python, or Infrastructure as Code (e.g., Terraform)

Experience working with customers in the U.S. Public Sector

U.S. Federal Government security clearance

Experience with DoD/DISA cybersecurity policies

Benefits

This position will be a hybrid role based out of Herndon, VA.

Direct, full-time W2 employment

Dark Wolf provides DevSecOps agile software development, information operations, penetration testing and incident response, applied research and rapid prototyping, machine learning, and mission support and engineering services to the Intelligence Community, national security, and Fortune 500 customers.

Herndon, Virginia, USA

https://darkwolfsolutions.com/

Late Stage

Leadership Team

Kevin Robbins

Co-Founder

Steven Bailey

COO

Recent News

Business Wire

Dark Wolf Evolves to Meet Mission Needs: Expanded Focus on Data, AI, and Products, Featuring BrickStor

2026-01-16

PR Newswire

Northern Virginia Technology Council Announces 2025 NVTC Cyber50 Honorees

2025-10-15

The Virginian-Pilot

Hampton contractor launches discussion forum to strengthen regional defense community

2024-11-08

Company data provided by

AI Tools

Customize Your Resume

Maximize your interview chances

Build Cover Letter

Make your application stand out

Analyze How Well You Fit

Understand your strength & weakness

Qualifications

2+ years of relevant experience

At least one Google Cloud Professional Certification

Experience supporting RMF processes, acting as an ISSO, Security Controls Validator, or performing information assurance engineering

Hands-on with eGRC tools like eMASS and XACTA

Ability to clearly communicate complex security concepts to both technical and non-technical stakeholders

Strong problem-solving skills with a proven ability to quickly learn and apply new technologies to solve complex client challenges

Familiarity with cloud automation, Infrastructure as Code (e.g., Terraform), or scripting to help automate compliance tasks

Understanding of Google Cloud services and technologies

B.A. or B.S. Information Security, Computer Science, or related discipline

US Citizenship and clearable up to a Secret Security Clearance

Experience working within Agile teams

Experience working with Google Cloud compliance products such as Security Command Center and Assured Workloads

Hands-on experience with modern compliance automation, OSCAL, Python, or Infrastructure as Code (e.g., Terraform)

Experience working with customers in the U.S. Public Sector

U.S. Federal Government security clearance

Experience with DoD/DISA cybersecurity policies

Required skills

Google Cloud Platform (GCP), Google Cloud Professional Certification, NIST Risk Management Framework (RMF), FedRAMP, NIST SP 800-53, eMASS, XACTA, Terraform, Google Cloud Security Command Center, Google Cloud Assured Workloads, OSCAL, Secret Security Clearance

Preferred skills

Experience working within Agile teams, Experience working with customers in the U.S. Public Sector, U.S. Federal Government security clearance, Experience with DoD/DISA cybersecurity policies

Experience

2+ years