UltraViolet Cyber

Analyst

• Investigate and Analyze: Conduct investigations to identify indicators of compromise.
• Coordinate with CSIRT team members on containment and response activities.
• Case Management: Maintain meticulous case management, ensuring all investigative actions are properly documented to support dispositions.
• Security Operations: Participate in rotational opportunities across the CSIRT, including incident response, cyber threat hunting, and detection engineering.
• Continuous Improvement: Participate in case reviews and identify opportunities for continuous improvement in investigations and documentation.
• Stay Informed: Actively pursue knowledge of emerging threats and attack vectors while maintaining expertise in the dynamic cyber landscape.
• Global Team Collaboration: Engage as an active member of a global 24x7 cyber defensive operations team, which will require some weekend coverage.
• Process Documentation: Assist in creating, updating, and maintaining investigative process documentation to ensure consistency and efficiency.

Cyber Defense Analyst

Financial Planning and Analysis

• Manage end-to-end customer invoicing for IT services engagements, ensuring accuracy and timeliness
• Handle Accounts Receivable (AR) and collections, including follow-ups with clients to ensure timely payments and reduction of outstanding dues
• Monitor aging reports, identify risks, and proactively drive collection strategies
• Collaborate closely with internal stakeholders including Delivery Managers, Sales teams, and Finance leadership to gather billing inputs and resolve discrepancies
• Act as a primary point of contact for clients regarding invoicing and payment-related queries
• Ensure invoicing compliance with contractual terms and agreed commercial models (T&M, Fixed Price, Milestones, etc.)
• Apply strong understanding of revenue recognition principles and ensure alignment with accounting standards
• Manage and track deferred revenue schedules, ensuring accurate recognition in line with contract terms and accounting guidelines
• Review and validate billing data, revenue schedules, and supporting documentation
• Drive continuous improvement in invoicing, AR, and revenue processes and controls
• Support audits by providing required documentation and explanations
• Work with finance systems and tools to maintain accurate invoicing, receivables, and revenue records

Finance Consultant

Consultant

• Lead and participate in full-lifecycle red team engagements: scoping, planning, execution, and reporting
• Simulate advanced persistent threat (APT) tactics against enterprise network and cloud environments
• Execute multi-stage attack chains spanning network compromise, Active Directory abuse, cloud environments, and data exfiltration
• Design and conduct social engineering campaigns including phishing, vishing, and smishing operations
• Conduct adversary simulation against hybrid and cloud-native environments (AWS, Azure, GCP)
• Develop custom tooling, payloads, and tradecraft to evade modern defensive controls (EDR, SIEM, CASB)
• Produce high-quality, actionable reports tailored to both technical and executive audiences
• Collaborate with blue team and MDR teams to deliver purple team assessments
• Mentor junior consultants and contribute to internal capability development
• Stay current with emerging threat actor TTPs, tooling, and industry research

Associate Principal – Red Team Consultant

Engineer

• Measure compliance with OMB Memorandum M-26-14 once the logging reference architecture (LRA is released) and provide recommendations for improvement.
• Assess and monitor security data feeds and improve coverage of key security data sources.
• Provide subject-matter expertise to support log monitoring and normalization.
• Create and update reports and alerts to assess data quality and compliance with security requirements.
• Collaborate with SOC, IT, and application teams to identify and address issues.
• Provide regular reports to senior management and data owners on the status of monitoring and M-26-14 implementation.
• Write documentation and standard operating procedures (SOPs) for custom data sources and application configurations.

Junior Splunk Engineer

Compliance

• Review and evaluate cybersecurity governance frameworks, policies, standards, and procedures
• Assess compliance with regulatory and industry standards such as: GDPR, HIPAA, SOC 2, NIST Cybersecurity Framework (CSF), NIST SP 800-53, ISO/IEC 27001, Cloud Security Alliance (CSA) Cloud Controls Matrix
• Apply maturity models (e.g., NIST CSF, CMMI) to establish a current-state baseline
• Conduct interviews with compliance stakeholders and business leaders
• Perform detailed document reviews (policies, procedures, audit reports)
• Evaluate AWS governance processes and controls in regulated environments
• Identify gaps in governance, risk management, and compliance capabilities
• Develop actionable recommendations to improve governance structure and compliance posture

AWS Cloud Governance, Compliance Advisor – Top Secret

Security Engineer

• Own end-to-end sales motions: prospecting, qualification, scoping, proposal development, negotiation, and close.
• Build and execute a territory plan that expands new logo acquisition and grows revenue across existing enterprise accounts.
• Position the full suite of offensive security services—pen testing, red teaming, cloud security testing, and managed offensive capabilities.
• Maintain a strong pipeline with 3x+ quota coverage and predictable forecasting.
• Lead consultative discussions with CISOs, engineering leaders, AppSec teams, and procurement stakeholders.
• Partner with technical SMEs and consulting leads to shape solutions aligned to client risk, maturity, and regulatory requirements.
• Establish multi-threaded relationships within accounts to improve deal velocity and renewal rates.
• Deliver compelling client presentations, statements of work, and value-based proposals.
• Work closely with the consulting delivery team to scope engagements accurately and ensure high customer satisfaction.
• Align with marketing on targeted campaigns, regional events, and ABM programs.
• Provide field intelligence and competitive insights back to product, delivery, and leadership teams.
• Achieve or exceed quarterly and annual bookings targets.
• Maintain accuracy of CRM data, forecasting, and pipeline metrics.
• Drive healthy mix of services revenue: net-new logos, expansion, and multi-project programs.

Sales Executive, Offensive Security Services Consulting

• Assess enterprise security tools such as SIEM platforms, IDS/IPS solutions, Vulnerability management systems
• Evaluate AWS-native security services including AWS GuardDuty, AWS Macie, AWS Inspector
• Conduct configuration reviews against CIS Benchmarks and AWS Well-Architected Framework
• Review logging and monitoring configurations to ensure adequate coverage and visibility
• Support or perform vulnerability assessments and penetration testing to validate tool effectiveness
• Analyze tool integration and data flow between systems
• Identify gaps, redundancies, and opportunities for optimization
• Provide recommendations to improve tooling effectiveness and coverage

Senior Security Tooling Engineer – Top Secret

Security Analyst

• Analyze logs, monitoring data, and security tool outputs
• Review access logs, privilege usage, and administrative activities
• Evaluate systems administration practices and operational procedures
• Conduct or support vulnerability assessments and penetration testing efforts
• Analyze identity and access management (IAM) configurations to identify:
• Misconfigurations
• Excessive privileges
• Anomalous activity
• Validate effectiveness of implemented security controls
• Document detailed findings, evidence, and recommendations
• Support development of assessment reports and provide quality review

Senior Security Analyst – Top Secret

• Assess security architecture across enterprise systems and AWS cloud environments
• Evaluate how AWS environments are governed, provisioned, operated, and consumed
• Analyze architecture within AWS IL4 (or similar regulated environments)
• Identify security gaps across: System design, Cloud configurations, Policy enforcement, Operational processes
• Evaluate alignment with: AWS Well-Architected Framework, DoD and federal security guidance, Zero Trust and defense-in-depth principles
• Provide target-state architecture recommendations
• Support identification of policy, operational, and technical deficiencies

AWS Cloud Security Architect – Top Secret

• System Authorization: Lead the development, review, and maintenance of System Security Plans (SSPs) and authorization packages.
• Risk & Vulnerability Management: Conduct regular security audits, oversee scanning operations (e.g., ACAS, Nessus), and manage Plan of Action and Milestones (POA&Ms) for remediation.
• Continuous Monitoring: Implement security telemetry, manage patch statuses, and monitor system activities for anomalous behavior or potential threats.
• Compliance & Governance: Ensure systems adhere to strict federal, Department of Defense (DoD), or Intelligence Community frameworks (e.g., NIST SP 800-53, FISMA).
• Incident Response & Configuration: Coordinate incident response, evaluate security impacts of system changes, and enforce access controls.
• Leadership & Advising: Provide strategic risk and compliance advice to system owners and Information System Security Managers (ISSMs), while mentoring junior ISSO staff.

Senior Information Systems Security Officer, Top Secret Clearance

• Plan and execute comprehensive security control assessments in accordance with frameworks like the Risk Management Framework (RMF) and FISMA.
• Review system configurations, evaluate evidence, and perform technical testing (e.g., vulnerability scanning) to validate security posture.
• Compile assessment results into Security Assessment Reports (SARs) and generate risk determinations for Authorizing Officials (AOs).
• Identify control weaknesses and support the development of Plans of Action and Milestones (POA&Ms).
• Guide junior assessors, review deliverables, and coordinate assessment activities with ISSOs, system owners, and stakeholders.

Security Controls Assessor

• Maintain Authorizations to Operate (ATOs) in accordance with government and industry frameworks (e.g., NIST, RMF, FISMA).
• Develop, update, and manage System Security Plans (SSPs) and track Plans of Action and Milestones (POA&Ms).
• Conduct routine vulnerability scanning, log analysis, and system auditing.
• Assess the security impact of hardware, software, and firmware changes before implementation.
• Act as the primary point of contact for security-related issues and coordinate incident investigations.