# Senior Security Engineer

**Company**: UltraViolet Cyber
**Location**: Arlington, VA
**Work arrangement**: hybrid
**Experience**: senior
**Job type**: full-time
**Salary**: USD 100,000-130,000 per-year-salary
**Category**: Security
**Industry**: Technology

**Apply**: https://jobs.lever.co/uvcyber/a9114d6f-59ab-4872-825f-c107d3afdf3b?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_c018428b-39a

## Description

UltraViolet Cyber is looking for a Senior Security Engineer to support one of its Federal customers. The role requires an analytical mindset, solid understanding of cybersecurity frameworks and methodologies, and hands-on experience with security tools in production environments.

Responsibilities:

- Investigate, validate, prioritize, and remediate vulnerabilities across endpoints, servers, cloud services, and applications.

- Produce clear, risk-based summaries of security assessment results and contribute to actionable reporting.

- Assist in selecting and applying appropriate information security controls in coordination with system engineers, architects, and other technical stakeholders.

- Support incident handling and response, digital forensics, threat detection, and vulnerability management processes.

- Use SIEM, SOAR, EDR, cloud services, and Microsoft enterprise technologies including O365, Azure, Defender, and Entra.

- Contribute to security planning, assessments, risk analysis, risk management, certification, and awareness activities for systems and networks.

- Analyze security issues and help develop effective remediation strategies.

- Communicate security concepts, risks, and recommendations to technical and non-technical audiences.

- Assist with vulnerability remediation and coordinate with teams to ensure timely resolution.

- Help optimize the Microsoft Defender suite, including Defender for Endpoint, Defender for Cloud, Defender for Identity, and Defender for Office 365.

- Assist with Microsoft Purview capabilities, including data classification, sensitivity labels, Data Loss Prevention, and eDiscovery workflows.

- Write and tune Kusto Query Language (KQL) queries in Microsoft Sentinel, Defender, and Log Analytics to aid detection and investigation.

- Contribute to the review and improvement of security controls using findings from assessments and red or blue team engagements.

- Help develop clear guidance and documentation for security controls, compliance requirements, and governance in the Microsoft cloud environment.

Requirements:

- Ability to attain DHS EOD.

- BA and 10 years of experience, or AA and 12 years of experience (per contract requirements).

- Active Security+ CE certification.

- Demonstrated experience regarding Conditional Access Policies (CAPs), Azure AD/Entra, and Zero Trust principles.

- Experience in one or more of the following areas: incident response, digital forensics, vulnerability management, identity and access management, threat detection, or security engineering.

- Exposure to cybersecurity assessments such as vulnerability assessments, threat assessments, application security, or infrastructure security.

- Familiarity with Cyber and NIST policy, Risk Management Framework, and the implementation of security mitigations.

- Strong analytical and problem-solving skills with a focus on optimizing security workflows.

- Professional, customer-oriented, and calm under pressure.

- Effective written and verbal communication skills across stakeholder levels.

## Skills

### Required
- cybersecurity frameworks
- security tools
- SIEM
- SOAR
- EDR
- Microsoft enterprise technologies
- Kusto Query Language (KQL)
- Conditional Access Policies (CAPs)
- Azure AD/Entra
- Zero Trust principles
- incident response
- digital forensics
- vulnerability management
- identity and access management
- threat detection
- security engineering

---

Source: [Apply at jobs.lever.co](https://jobs.lever.co/uvcyber/a9114d6f-59ab-4872-825f-c107d3afdf3b?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)