Senior Security Engineer

📋 Job Overview

UltraViolet Cyber is seeking a Senior Security Tools Engineer to support the security tools environment on the Security Tools program. This is a hybrid role based in Oxon Hill, MD, with three days per week onsite. The role requires experience diagnosing and closing detection and reporting gaps that span multiple security platforms.

🏢 About UltraViolet Cyber

UltraViolet Cyber is a leading platform-enabled unified security operations company providing a comprehensive suite of security operations solutions. Founded and operated by security practitioners with decades of experience, the UltraViolet Cyber security-as-code platform combines technology innovation and human expertise to make advanced real-time cybersecurity accessible for all organizations by eliminating risks of separate red and blue teams.

🎯 The Role

UltraViolet Cyber is seeking a Senior Security Tools Engineer to support the security tools environment on the Security Tools program. This is a hybrid role based in Oxon Hill, MD, with three days per week onsite. We are seeking a technical resource with experience diagnosing and closing detection and reporting gaps that span multiple security platforms — someone who can work across endpoint, SIEM, and adjacent tools rather than inside a single product. This role will include supporting tool integration initiatives, closing gaps created by tool deprecations or replacements, and supporting security automation across the stack.

✅ Key Responsibilities

• Lead cross-tool security engineering efforts, advising on best practices for closing detection and reporting gaps that span multiple platforms
• Diagnose and resolve reporting and visibility gaps created when a tool in the environment is deprecated, replaced, or reconfigured — for example, reconstructing lost reporting coverage by combining endpoint telemetry with Splunk data
• Design, implement, and document data flows and integration points across endpoint protection, SIEM, and other security tools supporting the program
• Build and tune detection logic, correlation searches, and dashboards that hold up as individual tools in the stack change, are replaced, or are retired
• Lead the technical transition work when a security tool is deprecated, replaced, or reconfigured, ensuring no loss of detection or reporting coverage
• Integrate tools such as CrowdStrike, Splunk, Cribl, CyberArk, Suricata, Tenable, Tanium, Thales, CASB, Trellix, Axonius, and others to close cross-platform visibility gaps
• Develop automation and correlation workflows using APIs across the security tool stack to reduce manual reporting and analysis work
• Support threat hunting and incident response efforts that require correlating evidence across more than one tool or data source
• Support endpoint and platform security compliance with NIST, FISMA, and agency-specific requirements
• Maintain current, accurate documentation of tool configurations, data flows, and integration architecture across the stack
• Serve as the team's point of contact for cross-tool security engineering issues

📌 Required Qualifications

• Experience diagnosing and closing detection and reporting gaps that span multiple security platforms
• Strong customer service and communication skills
• Self-directed, organized, and results-driven
• Experience with endpoint protection, SIEM, and other security tools
• Knowledge of security automation and correlation workflows
• Understanding of compliance requirements such as NIST, FISMA, and agency-specific requirements

⭐ Desirable Experience

• Experience with tools such as CrowdStrike, Splunk, Cribl, CyberArk, Suricata, Tenable, Tanium, Thales, CASB, Trellix, Axonius
• Experience with threat hunting and incident response
• Experience with security compliance and documentation

🎁 Benefits

Competitive salary and benefits package.

🛂 Visa & Eligibility

Eligibility to work in the United States required.