UltraViolet Cyber

MDR and penetration testing services

Senior Security Engineer

Security Engineering & Architecture +1Confirmed live in the last 24 hours

Full-timeArlington County, Arlington, VA, USA$100k - $130k /yrHybrid

About the Job

Requirements

Ability to attain Department of Homeland Security Entry on Duty (DHS EOD).
A Bachelor of Arts degree and 10 years of experience, or an Associate of Arts degree and 12 years of experience, as required by the contract.
Active Security+ CE certification.
Demonstrated experience with Conditional Access Policies, Azure Active Directory/Entra, and Zero Trust principles.
Experience in one or more of incident response, digital forensics, vulnerability management, identity and access management, threat detection, or security engineering.
Exposure to cybersecurity assessments such as vulnerability assessments, threat assessments, application security, or infrastructure security.
Familiarity with cyber and National Institute of Standards and Technology policy, the Risk Management Framework, and implementation of security mitigations.
Strong analytical and problem-solving skills focused on optimizing security workflows.
Effective written and verbal communication across stakeholder levels.

Responsibilities

Investigate, validate, prioritize, and remediate vulnerabilities across endpoints, servers, cloud services, and applications.
Produce risk-based summaries of security assessment results and contribute to actionable reporting.
Assist in selecting and applying information security controls with system engineers, architects, and other technical stakeholders.
Support incident handling and response, digital forensics, threat detection, and vulnerability management processes.
Use security information and event management, security orchestration automation and response, endpoint detection and response, cloud services, and Microsoft enterprise technologies including O365, Azure, Defender, and Entra.
Contribute to security planning, assessments, risk analysis, risk management, certification, and awareness activities for systems and networks.
Analyze security issues and help develop remediation strategies.
Communicate security concepts, risks, and recommendations to technical and non-technical audiences.
Assist with vulnerability remediation and coordinate with teams to ensure timely resolution.
Help optimize the Microsoft Defender suite, including Defender for Endpoint, Defender for Cloud, Defender for Identity, and Defender for Office 365.
Assist with Microsoft Purview capabilities, including data classification, sensitivity labels, Data Loss Prevention, and eDiscovery workflows.
Write and tune Kusto Query Language queries in Microsoft Sentinel, Defender, and Log Analytics to support detection and investigation.
Contribute to reviewing and improving security controls using findings from assessments and red or blue team engagements.
Help develop guidance and documentation for security controls, compliance requirements, and governance in the Microsoft cloud environment.

Salary Range: 100000 to 130000 (Currency: USD) (Pay period: per-year-salary)

Make a difference here.

UltraViolet Cyber is a leading platform-enabled unified security operations company providing a comprehensive suite of security operations solutions. Founded and operated by security practitioners with decades of experience, the UltraViolet Cyber security-as-code platform combines technology innovation and human expertise to make advanced real-time cybersecurity accessible for all organizations by eliminating risks of separate red and blue teams.

By creating continuously optimized identification, detection, and resilience from today’s dynamic threat landscape, UltraViolet Cyber provides both managed and custom-tailored unified security operations solutions to the Fortune 500, Federal Government, and Commercial clients. UltraViolet Cyber is headquartered in McLean, Virginia, with global offices across the U.S. and in India.

UltraViolet Cyber is looking for a Security Engineer to support one of our Federal customers. The role calls for an analytical mindset, solid understanding of cybersecurity frameworks and methodologies, and hands-on experience with security tools in production environments. You will work across identity and access management, compliance, vulnerability management, red and blue teams, development, and systems engineering to keep customer systems mission ready.

What You'll Do:

-Investigate, validate, prioritize, and remediate vulnerabilities across endpoints, servers, cloud services, and applications.

-Produce clear, risk-based summaries of security assessment results and contribute to actionable reporting.

-Assist in selecting and applying appropriate information security controls in coordination with system engineers, architects, and other technical stakeholders.

-Support incident handling and response, digital forensics, threat detection, and vulnerability management processes.

-Use SIEM, SOAR, EDR, cloud services, and Microsoft enterprise technologies including O365, Azure, Defender, and Entra.

-Contribute to security planning, assessments, risk analysis, risk management, certification, and awareness activities for systems and networks.

-Analyze security issues and help develop effective remediation strategies.

-Communicate security concepts, risks, and recommendations to technical and non-technical audiences.

-Assist with vulnerability remediation and coordinate with teams to ensure timely resolution.

-Help optimize the Microsoft Defender suite, including Defender for Endpoint, Defender for Cloud, Defender for Identity, and Defender for Office 365.

-Assist with Microsoft Purview capabilities, including data classification, sensitivity labels, Data Loss Prevention, and eDiscovery workflows.

-Write and tune Kusto Query Language (KQL) queries in Microsoft Sentinel, Defender, and Log Analytics to aid detection and investigation.

-Contribute to the review and improvement of security controls using findings from assessments and red or blue team engagements.

-Help develop clear guidance and documentation for security controls, compliance requirements, and governance in the Microsoft cloud environment.

What You've Done:

-Ability to attain DHS EOD.

-BA and 10 years of experience, or AA and 12 years of experience(per contract requirements).

-Active Security+ CE certification.

-Demonstrated experience regarding Conditional Access Policies (CAPs), Azure AD/Entra, and Zero Trust principles.

-Experience in one or more of the following areas: incident response, digital forensics, vulnerability management, identity and access management, threat detection, or security engineering.

-Exposure to cybersecurity assessments such as vulnerability assessments, threat assessments, application security, or infrastructure security.

-Familiarity with Cyber and NIST policy, Risk Management Framework, and the implementation of security mitigations.

-Strong analytical and problem-solving skills with a focus on optimizing security workflows.

-Professional, customer-oriented, and calm under pressure.

-Effective written and verbal communication skills across stakeholder levels.

UltraViolet Cyber maintains broad salary ranges for its roles in order to account for variations in knowledge, skills, experience, market conditions and locations, as well as reflect our company's differing products, services, industries and lines of business. Candidates are typically placed into the range based on the preceding factors.

We sincerely thank all applicants in advance for submitting their interest in this position. We know your time is valuable.

UltraViolet Cyber welcomes and encourages diversity in the workplace regardless of race, gender, religion, age, sexual orientation, gender identity, disability, or veteran status.

If you want to make an impact, UltraViolet Cyber is the place for you!

About the Company

UltraViolet Cyber

MDR and penetration testing services

UltraViolet Cyber focuses on delivering managed security solutions that blend defensive and offensive security to boost organizational resilience. The company offers 24/7 Managed Detection and Response (MDR) and Penetration Testing as a Service, both sold on a subscription basis. Its Security as Code platform automates threat detection and investigation, providing a unified risk view for the security operations team. By integrating Red Team (attack simulation) and Blue Team (defense) activities, the company ensures vulnerabilities are both identified and promptly remediated. The main goal is to help organizations continuously improve cyber readiness and protect critical data and infrastructure.

Company size: 501-1,000
Company stage: Series A
Total funding: $4.1M
Headquarters: Tysons, VA
Founded: 2023

Recently Posted Jobs

Explore more opportunities at UltraViolet Cyber

See more jobs