Full-Time
Senior Security
UltraViolet Cyber
501-1,000 employees
MDR and penetration testing services
Compensation Overview
$80k - $110k/yr
No H1B Sponsorship
Reston, VA, USA
In Person
On-site 5 days/week in Herndon, VA; US work authorization required.
US Top Secret Clearance Required
 IT & Security (1) |
|---|
- Active US Secret Security Clearance
- 5+ years of experience working in a Security Operations Center (SOC) or Network Operations Center (NOC) environment performing security event monitoring and analysis
- Working knowledge of the various operating systems (e.g. Windows, OS X, Linux, etc.) commonly deployed in enterprise networks.
- Must possess a working knowledge of network communications and routing protocols (e.g. TCP, UDP, ICMP, BGP, MPLS, etc.) and common internet applications and standards (e.g. SMTP, DNS, DHCP, SQL, HTTP, HTTPS, etc.)
- Familiarity with adversarial tactics, techniques, and procedures (TTPs)
- Must be capable of analyzing security logs and events from devices such as firewalls, IDS/IPS, HIDS/HIPS, proxy/web filter, vulnerability scans, routers, NetFlow, VPN gateways, server event logs, email and host antivirus, desktop security monitoring agents, antivirus servers, IP services (DNS, DHCP)
- network devices and cloud security infrastructure (e.g. AWS, Azure, Oracle, Salesforce)
- 8570 Certification(s): Security+ or equivalent
- Secret Clearance
- High school diploma needed
- Monitor and analyze security events and alerts reported by the SIEM on a 24x7 basis to identify and investigate suspicious or malicious activity, or other cyber events which violate policy
- Work with a large team that rotates 3x12 or 4x12 hour shifts
- Analyze logs and events from various device types to feed into the SOC SIEM architecture
- Provide documentation detailing any additional information collected and maintained for each security investigation
- Record all artifacts associated with all security events and incident investigations within the SOC incident and tracking application
- Must be legally allowed to work in the US, and the work must be done in the US
- No third-party candidates will be considered
- Preferred: Certification(s): Security+, GCIH, CEH, or CYSA+
- Experience with Splunk query language
- Experience with IDS/IPS/firewall/security configurations and signature development
- Experience with PCAP analysis
- Experience with Tanium threat response
- Ability and prior experience with analyzing information technology security events to discern events that qualify as legitimate security incidents as opposed to non-incidents. This includes the identification of malicious code present within a computer system as well identification of malicious activities that are present within a computer system and/or enterprise network
- Experience working with a ticket management system to collect, document and maintain information pertinent to security investigations and incidents
- Excellent verbal and written communications skills and ability produce clear and thorough security incident reports and briefings
- Experience in monitoring the operational status of monitoring components and escalating and reporting outages of the components
- Conceptual understanding of Windows Active Directory is also desired
- Experience working with various event logging systems and must be proficient in the review of security event log analysis. Previous experience with SIEM platforms that perform log collection, analysis, correlation, and alerting is also preferred
- Experience with the identification and implementation of counter-measures or mitigating controls for deployment and implementation in the enterprise network environment
- Experience in collecting and maintaining information pertinent to security; investigations and incidents in a format that supports analysis, situational awareness reporting, and law enforcement investigation efforts
UltraViolet Cyber focuses on delivering managed security solutions that blend defensive and offensive security to boost organizational resilience. The company offers 24/7 Managed Detection and Response (MDR) and Penetration Testing as a Service, both sold on a subscription basis. Its Security as Code platform automates threat detection and investigation, providing a unified risk view for the security operations team. By integrating Red Team (attack simulation) and Blue Team (defense) activities, the company ensures vulnerabilities are both identified and promptly remediated. The main goal is to help organizations continuously improve cyber readiness and protect critical data and infrastructure.
Company Size
501-1,000
Company Stage
Series A
Total Funding
$4.1M
Headquarters
McLean, Virginia
Founded
2023
Simplify's Take
What believers are saying
- Named to Inc. 5000 fastest-growing companies list in 2025.
- Global offices in McLean, Hyderabad, Toronto, and London support expansion.
- SOC-as-a-Service provides 24x7x365 monitoring for Fortune 500 clients.
What critics are saying
- CrowdStrike's Falcon erodes UV Lens subscriptions in 6-12 months.
- Mandiant poaches ex-NSA talent, hollowing penetration testing in 9-15 months.
- NDAA 2027 cuts bankrupt government revenue from non-FedRAMP UV Lens.
What makes UltraViolet Cyber unique
- UV Lens integrates offensive security, detection, and response, eliminating silos.
- Founded by national intelligence practitioners for Global 2000 and federal clients.
- Merger of four firms creates unified Red Team and Blue Team operations.
Help us improve and share your feedback! Did you find this helpful?
Your Connections
People at UltraViolet Cyber who can refer or advise you
Benefits
Health Insurance
Dental Insurance
Vision Insurance
Life Insurance
Disability Insurance
401(k) Company Match
401(k) Retirement Plan
Unlimited Paid Time Off
Paid Holidays
Growth & Insights and Company News
6 month growth
↑ 4%1 year growth
↓ -1%2 year growth
↑ 41%With backing from private equity, four cybersecurity companies have combined into one and have set up shop in Northern Virginia.