Senior Security Engineer

UltraViolet Cyber is looking for a Senior Security Engineer to support one of its Federal customers. The role requires an analytical mindset, solid understanding of cybersecurity frameworks and methodologies, and hands-on experience with security tools in production environments.

Responsibilities:

• Investigate, validate, prioritize, and remediate vulnerabilities across endpoints, servers, cloud services, and applications.
• Produce clear, risk-based summaries of security assessment results and contribute to actionable reporting.
• Assist in selecting and applying appropriate information security controls in coordination with system engineers, architects, and other technical stakeholders.
• Support incident handling and response, digital forensics, threat detection, and vulnerability management processes.
• Use SIEM, SOAR, EDR, cloud services, and Microsoft enterprise technologies including O365, Azure, Defender, and Entra.
• Contribute to security planning, assessments, risk analysis, risk management, certification, and awareness activities for systems and networks.
• Analyze security issues and help develop effective remediation strategies.
• Communicate security concepts, risks, and recommendations to technical and non-technical audiences.
• Assist with vulnerability remediation and coordinate with teams to ensure timely resolution.
• Help optimize the Microsoft Defender suite, including Defender for Endpoint, Defender for Cloud, Defender for Identity, and Defender for Office 365.
• Assist with Microsoft Purview capabilities, including data classification, sensitivity labels, Data Loss Prevention, and eDiscovery workflows.
• Write and tune Kusto Query Language (KQL) queries in Microsoft Sentinel, Defender, and Log Analytics to aid detection and investigation.
• Contribute to the review and improvement of security controls using findings from assessments and red or blue team engagements.
• Help develop clear guidance and documentation for security controls, compliance requirements, and governance in the Microsoft cloud environment.

Requirements:

• Ability to attain DHS EOD.
• BA and 10 years of experience, or AA and 12 years of experience (per contract requirements).
• Active Security+ CE certification.
• Demonstrated experience regarding Conditional Access Policies (CAPs), Azure AD/Entra, and Zero Trust principles.
• Experience in one or more of the following areas: incident response, digital forensics, vulnerability management, identity and access management, threat detection, or security engineering.
• Exposure to cybersecurity assessments such as vulnerability assessments, threat assessments, application security, or infrastructure security.
• Familiarity with Cyber and NIST policy, Risk Management Framework, and the implementation of security mitigations.
• Strong analytical and problem-solving skills with a focus on optimizing security workflows.
• Professional, customer-oriented, and calm under pressure.
• Effective written and verbal communication skills across stakeholder levels.