{"id":1671645,"url":"https://alion.io/job/dark-wolf-solutions-cloud-security-grc-consultant","title":"Cloud Security GRC Consultant","company":{"id":716229,"name":"Dark Wolf Solutions","domain":"darkwolf.io","url":"https://alion.io/company/darkwolf","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":91,"open_postings":12,"ghost_share":0,"stale_share":0.167,"repost_share":0,"time_to_fill_p50_days":73,"computed_at":"2026-10-06T05:45:30Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"contractor","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Herndon, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":100000,"max":140000,"currency":"USD","period":"year","gross":null,"usd_annual":140000},"salary_estimate":null,"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"FedRAMP","optional":false},{"name":"GCP","optional":false},{"name":"Terraform","optional":false},{"name":"Python","optional":true}],"status":"live","first_seen_at":"2026-10-01T21:07:26Z","employer_posted_date":"2026-10-01","last_verified_at":"2026-10-06T21:50:52Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":5},"description":"Dark Wolf’s Google Cloud Security Governance, Risk, and Compliance (GRC) Consultants are innovative security professionals responsible for applying federal security frameworks (such as the National Institute of Standards and Technology (NIST) Risk Management Framework (RMF) and Federal Risk and Authorization Management Program (FedRAMP)) to modern, complex Google Cloud environments. We are looking for tech-forward consultants who want to move beyond checklist compliance. This role requires a solid understanding of Google Cloud services and the ability to bridge the gap between engineering and security. The ideal candidate will help navigate the Assessment & Authorization (A&A) lifecycle, partnering directly with cloud architects to integrate compliance into system design and translating complex cloud architecture into verifiable evidence to achieve an Authorization to Operate (ATO).\nResponsibilities:\nResponsibilities:\nWork collaboratively within a fast paced Agile team environment\nStay up-to-date on the latest Google Cloud services and technologies\nImplement security best practices for Google Cloud solutions\nServe as a key contributor for federal compliance requirements, including FedRAMP, NIST SP 800-53, and agency-specific security overlays\nSupport development and implementation of innovative methods to achieve compliance with government and commercial cybersecurity frameworks\nConduct detailed technical security control assessments against system components and configurations within the GCP environment, identifying gaps, risks, and recommended mitigations\nActively contribute to the development and finalization of authorization artifacts\nPartner with cloud architecture and engineering teams to provide actionable compliance guidance, ensuring security is built-in from system design through deployment\nUtilize Google Cloud native tools and features to aid in continuous monitoring (ConMon) activities, vulnerability management, and security posture management\nSupport reviews with the Authorizing Official (AO), security assessors (e.g., 3PAOs), and federal agency security teams during control assessments and authorization reviews\nDevelop clear, compelling Plan of Action and Milestones (POA&M) entries, helping the team communicate system risks, impact, and mitigation strategies to stakeholders\nSupport strategic consulting efforts on evolving federal cloud security policy and best practices\nQualifications:\n2+ years of relevant experience\nAt least one Google Cloud Professional Certification\nExperience supporting RMF processes, acting as an ISSO, Security Controls Validator, or performing information assurance engineering\nHands-on with eGRC tools like eMASS and XACTA\nAbility to clearly communicate complex security concepts to both technical and non-technical stakeholders\nStrong problem-solving skills with a proven ability to quickly learn and apply new technologies to solve complex client challenges\nFamiliarity with cloud automation, Infrastructure as Code (e.g., Terraform), or scripting to help automate compliance tasks\nUnderstanding of Google Cloud services and technologies\nB.A. or B.S. Information Security, Computer Science, or related discipline\nUS Citizenship and clearable up to a Secret Security Clearance\nPreferred Qualifications:\nExperience working within Agile teams\nExperience working with Google Cloud compliance products such as Security Command Center and Assured Workloads\nHands-on experience with modern compliance automation, OSCAL, Python, or Infrastructure as Code (e.g., Terraform)\nExperience working with customers in the U.S. Public Sector\nU.S. Federal Government security clearance\nExperience with DoD/DISA cybersecurity policies\nThis position will be a hybrid role based out of Herndon, VA. \nThe salary range for this position is estimated to be between $100,000.00 - $140,000.00, commensurate on experience and technical skillset.\nWe are proud to be an EEO/AA employer Minorities/Women/Veterans/Disabled and other protected categories.\nIn compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.\nWe are strictly looking for direct, full-time W2 employees. We do not engage with third-party staffing agencies, C2C, or 1099 independent contractors for this role.","description_format":"text","description_chars":4386,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","DevSecOps","Managed Security","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-10-02T06:57:07Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":4,"expected_fill_days":73,"reasons":["conf:0","velocity","win:early","comp:junior"],"computed_at":"2026-10-06T05:45:30Z"},"pay":{"stated_usd_annual":140000,"is_top_pay":true},"html_url":"https://alion.io/job/dark-wolf-solutions-cloud-security-grc-consultant","json_url":"https://alion.io/job/dark-wolf-solutions-cloud-security-grc-consultant.json","meta":{"generated_at":"2026-10-06T23:04:12Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":4027,"day_limit":5000,"remaining_today":973,"minute_limit":60,"resets_at":"2026-10-07T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":716229},"rest":"https://alion.io/mcp/rest/get_company?id=716229"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdark-wolf-solutions-cloud-security-grc-consultant"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdark-wolf-solutions-cloud-security-grc-consultant"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdark-wolf-solutions-cloud-security-grc-consultant"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/dark-wolf-solutions-cloud-security-grc-consultant\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdark-wolf-solutions-cloud-security-grc-consultant"}]}