UltraViolet Cyber

MDR and penetration testing services

Senior Cloud Security & Compliance Engineer

Security Engineering & ArchitectureConfirmed live in the last 24 hours

Full-timeRemote in USA$120k - $170k /yrRemote

About the Job

Requirements

At least five years of hands-on cloud security engineering experience.
Production administration, custom rules or Cloud Configuration Rules, policies, and integrations with Wiz or an equivalent CNAPP; acceptable alternatives include Prisma Cloud, Orca, Microsoft Defender for Cloud, or Lacework, paired with demonstrated ability to ramp quickly on Wiz.
Proficiency in Python scripting, automation, and API integrations, including the Wiz GraphQL API, boto3, or similar tools.
Deep AWS experience and strong experience with either Azure or GCP, along with working knowledge of all three platforms.
Experience developing reusable, secure-by-default Terraform/HCL modules.
Experience with OPA/Rego or an equivalent policy-as-code framework; Wiz custom rules use Rego.
Ability to assess exploitability and blast radius, prioritize risk, and tune false positives.
U.S. citizenship is required.
Candidates must satisfy applicable U.S. regulatory requirements for work in FedRAMP environments.

Responsibilities

Administer the Wiz platform as a primary technical resource.
Develop custom policies as code and automate FedRAMP and NIST SP 800-53 controls across multi-cloud environments.
Improve cloud security posture through practical, scalable policy engineering.
Increase finding quality by reducing false positives and improving detection accuracy.
Deliver reusable Terraform modules and secure-by-default infrastructure patterns.
Enable engineering teams to remediate risk efficiently through automation and clear guidance.
Support FedRAMP and other regulated cloud environments with effective technical controls and continuous monitoring.
Build scalable security capabilities across AWS, Azure, and GCP.
Strengthen the organization's ability to identify, understand, and remediate cloud security risk.

Desired Qualifications

Experience with NIST SP 800-53, FedRAMP, GovCloud, or Impact Level environments, including mapping controls to technical guardrails.
Experience with Kubernetes manifests and container security.
Experience integrating security controls into CI/CD platforms such as GitHub Actions, GitLab, or Jenkins.
Experience supporting audits and continuous monitoring (ConMon).
Experience mentoring engineers and leading technical discussions.
Relevant security certifications, such as AWS Certified Security – Specialty, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Professional Cloud Security Engineer, or CCSP.

Salary Range: 120000 to 170000 (Currency: USD) (Pay period: per-year-salary)

Make a difference here.

UltraViolet Cyber is a leading platform-enabled unified security operations company providing a comprehensive suite of security operations solutions. Founded and operated by security practitioners with decades of experience, the UltraViolet Cyber security-as-code platform combines technology innovation and human expertise to make advanced real-time cybersecurity accessible for all organizations by eliminating risks of separate red and blue teams.

By creating continuously optimized identification, detection, and resilience from today’s dynamic threat landscape, UltraViolet Cyber provides both managed and custom-tailored unified security operations solutions to the Fortune 500, Federal Government, and Commercial clients. UltraViolet Cyber is headquartered in McLean, Virginia, with global offices across the U.S. and in India.

We are seeking a hands-on cloud security engineer to serve as a primary technical resource for the Wiz platform. The team member will administer Wiz, develop custom policies as code, and automate FedRAMP and NIST SP 800-53 controls across multi-cloud environments. Experience with FedRAMP or NIST SP 800-53 is preferred but not required; however, candidates must satisfy applicable U.S. regulatory requirements for work in FedRAMP environments. Python and Terraform will be used daily.

What You'll Do:

• Improve cloud security posture through practical, scalable policy engineering.

• Increase finding quality by reducing false positives and improving detection accuracy.

• Deliver reusable Terraform modules and secure-by-default infrastructure patterns.

• Enable engineering teams to remediate risk efficiently through automation and clear guidance.

• Support FedRAMP and other regulated cloud environments with effective technical controls and continuous monitoring.

• Build scalable security capabilities across AWS, Azure, and GCP.

• Strengthen the organization’s ability to identify, understand, and remediate cloud security risk.

What You Have:

US Citizenship is Required

• Cloud security engineering: At least five years of hands-on experience.

• Wiz or equivalent CNAPP experience: Production administration, custom rules or Cloud Configuration Rules, policies, and integrations. Experience with Prisma Cloud, Orca, Microsoft Defender for Cloud, or Lacework is acceptable when paired with a demonstrated ability to ramp quickly on Wiz.

• Python: Proficiency in scripting, automation, and API integrations, including the Wiz GraphQL API, boto3, or similar tools.

• Multi-cloud expertise: Deep AWS experience plus strong experience with either Azure or GCP, along with working knowledge of all three platforms.

• Terraform/HCL: Experience developing reusable, secure-by-default modules.

• Policy as code: Experience with OPA/Rego or an equivalent framework; Wiz custom rules use Rego.

• Finding triage: Ability to assess exploitability and blast radius, prioritize risk, and tune false positives. Preferred Qualifications

• Experience with NIST SP 800-53, FedRAMP, GovCloud, or Impact Level environments, including mapping controls to technical guardrails.

• Experience with Kubernetes manifests and container security.

• Experience integrating security controls into CI/CD platforms such as GitHub Actions, GitLab, or Jenkins.

• Experience supporting audits and continuous monitoring (ConMon).

• Experience mentoring engineers and leading technical discussions.

• Relevant security certifications, such as AWS Certified Security – Specialty, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Professional Cloud Security Engineer, or CCSP.

UltraViolet Cyber maintains broad salary ranges for its roles in order to account for variations in knowledge, skills, experience, market conditions and locations, as well as reflect our company's differing products, services, industries and lines of business. Candidates are typically placed into the range based on the preceding factors.

We sincerely thank all applicants in advance for submitting their interest in this position. We know your time is valuable.

UltraViolet Cyber welcomes and encourages diversity in the workplace regardless of race, gender, religion, age, sexual orientation, gender identity, disability, or veteran status.

If you want to make an impact, UltraViolet Cyber is the place for you!

About the Company

UltraViolet Cyber

MDR and penetration testing services

UltraViolet Cyber focuses on delivering managed security solutions that blend defensive and offensive security to boost organizational resilience. The company offers 24/7 Managed Detection and Response (MDR) and Penetration Testing as a Service, both sold on a subscription basis. Its Security as Code platform automates threat detection and investigation, providing a unified risk view for the security operations team. By integrating Red Team (attack simulation) and Blue Team (defense) activities, the company ensures vulnerabilities are both identified and promptly remediated. The main goal is to help organizations continuously improve cyber readiness and protect critical data and infrastructure.

Company size: 501-1,000
Company stage: Series A
Total funding: $4.1M
Headquarters: Tysons, VA
Founded: 2023

Recently Posted Jobs

Explore more opportunities at UltraViolet Cyber

See more jobs