UltraViolet Cyber

Security Operations

• Monitor and analyze log data, network traffic, and/or alerts generated by a variety of security technologies in real-time.
• Respond, triage, and escalate security incidents using a SIEM platform following documented procedures.
• Assist in the initial investigation of low-to-medium complexity attacks against customer networks.
• Perform basic analyses of alerts generated from network infrastructure, applications, operating systems, and security tools.
• Support the execution of vulnerability scans and assist in analyzing results for remediation recommendations.
• Draft initial security incident reports detailing the threat, its characteristics, and required remediation activities for review by a senior analyst.
• Research new threats and support senior analysts in ensuring appropriate detection capabilities are in place.
• Contribute to the quality and timeliness of the security incident detection and classification service.
• Ensure standards and procedures are adhered to within defined SLA’s.
• Articulate security issues to customers, both verbally and written, with supervision.
• Referring difficult or complex issues to more experienced staff.
• Developing an understanding of current vulnerabilities, attacks, and countermeasures.
• Identify opportunities for process improvement and suggest them to senior analysts.
• Manage and track customer issues and requests within a ticketing system.
• Work within a 24x7x365 team to further support the timely delivery of monitoring services.

Associate SOC Analyst

DevOps Engineer

• Work with security & infrastructure engineering teams to deploy Infrastructure as Code with Terraform.
• Hands-on experience with AWS, CloudFormation, Terraform, Salt Stack, Ansible, Chef, Puppet, Jenkins, and Splunk.
• Utilize Python and bash scripting to automate tasks and improve operational efficiency. Interact with platform customers, translating business requirements into actionable development tasks.
• Knowledge of DevOps principles and building Continuous Integration projects.
• Manage and optimize infrastructure in AWS and Azure. Implement data collection, curation, and delivery processes for data availability and integrity.
• Collaborate on designing and implementing scalable and secure solutions.
• Configure and utilize Splunk for log management and monitoring.
• Administer Jenkins, build pipelines, and develop solutions with Jenkins files.
• Support solutions on cloud platforms like AWS and GCP. Provide technical expertise and guidance to support customer needs.

Security Engineer

• Design, deploy, and maintain Tanium infrastructure including servers, modules, and connectors.
• Implement and optimize Tanium modules, providing O&M support of Tenable and ForeScout
• Create and maintain Tanium content including sensors, packages, and saved questions
• Configure and optimize Tanium solutions such as Patch, Comply, Discover, Threat Response, Monitor, and Enforce.
• Manage package deployment, module updates, and client health across the enterprise.
• Develop automation workflows for security and compliance monitoring using Tanium
• Support vulnerability management processes using Tanium and Tenable
• Configure and maintain Tanium Connect integrations with other security tools
• Assist with incident response activities using Tanium Threat Response
• Generate compliance reports to support federal requirements (FISMA, RMF, NIST)
• Troubleshoot Tanium, Tenable, and ForeScout
• Document configurations, procedures, and architecture
• Collaborate with cybersecurity teams to implement security controls across supporting productions

Senior Security Engineer – Tanium

Account Manager

• Serve as the primary technical point of contact for assigned client accounts, enabling successful delivery of services.
• Partner with Account Manager to ensure ongoing customer satisfaction and alignment to customer requirements and expectations.
• Develop a deep understanding of each client’s environment, business goals, and cybersecurity needs.
• Proactively manage service delivery, including onboarding, reporting, monthly operating reviews, quarterly business reviews (QBRs), and technical escalations. Track action items, risks, and issues to closure.
• Track metrics and KPIs to measure client health and ensure service-level agreement (SLA) compliance. Prepare and present service delivery metrics to customers on a recurring business rhythm.
• Coordinate with internal teams (SOC, Engineering, etc.) to ensure high-quality service delivery and timely resolution of inquiries and issues.
• Research customers’ technical issues in a timely manner and follow up with recommendations and action plans.
• Interpret and explain technical findings, threat reports, and incident analysis in a way that aligns with the client’s business context.
• Provide guidance on security best practices, compliance requirements, and risk mitigation strategies.
• Serve as customer advocate with internal stakeholders to ensure voice of the customer is shared, assessed and addressed by internal parties.
• Escalate customer issues to management when appropriate.
• Help drive expansion of new services and capabilities by identifying opportunities for client growth.
• Support renewal and upsell opportunities in coordination with account management and sales teams.
• Manage TAM team including team leadership and definition of TAM processes.

Director, Technical Account Management

Manager

• Lead and manage the day-to-day operations of our SOC, ensuring the effective monitoring, detection, and response to security incidents.
• Build and mentor a high-performing team of SOC analysts, fostering a collaborative and proactive work environment.
• Must be able to align and fulfil broader CSO org and security governance requirements.
• Develop and implement SOC strategies and best practices, aligning them with industry standards and customer requirements.
• Oversee threat intelligence gathering and analysis, staying updated on emerging threats and trends to enhance the organization's defensive capabilities.
• Coordinate and execute incident response activities, ensuring timely resolution and minimizing the impact of security incidents.
• Manage and optimize security technologies, including SIEM, IDS/IPS, endpoint security solutions, and other SOC tools, to maximize their effectiveness.
• Develop and maintain strong relationships with key stakeholders, including customers, internal teams, and external partners.
• Conduct regular assessments of the SOC's performance, metrics, and processes, identifying areas for improvement and implementing necessary changes.
• Stay abreast of the latest advancements in cyber security, threat landscape, and relevant regulations, integrating them into SOC operations.
• Collaborate with other teams, such as IT, compliance, and legal, to ensure coordinated efforts in addressing security risks and incidents.
• Ensure compliance with relevant industry standards, regulations, and frameworks (e.g., NIST,PCI DSS, ISO 27001).

Senior SOC Manager, Federal

• Implement and validate firewall rule requests in Palo Alto firewalls via Panorama.
• Retire firewall objects and policies associated with decommissioned servers.
• Collaborate with internal teams to ensure rule accuracy and alignment with business needs.
• Maintain documentation of changes and configurations.
• Assist in troubleshooting and resolving firewall-related issues.
• Follow change management procedures and security standards.

Network Security Engineer

• Monitor and analyze security events and alerts reported by the SIEM on a 24x7 basis to identify and investigate suspicious or malicious activity
• Work as part of a large team that rotates 3x12 or 4x12 hour shifts
• Analyze logs and events from traditional and non-traditional device feeds (e.g., HR data, badging information, physical security devices)
• Provide documentation detailing any additional information collected and maintained for each security investigation
• Record all artifacts (emails, logs, documents, URLs, screenshots, etc.) associated with security events and incident investigations within the SOC incident and tracking application
• Coordinate and escalate incidents as appropriate and maintain incident records
• Perform analysis across OS, network, and cloud environments to determine incident scope and impact
• Work onsite 5 days per week in Herndon, VA and support Federal and Commercial clients

Senior Security Analyst, SOC

Engineer

• Support a major customer in ongoing operations, support, and engineering for the full Zscaler product suite (ZIA, ZPA, ZDX, ZCC) and related technologies
• Configure and tune the system to optimize performance and/or alerting
• Integrate solutions with third party technology solutions through the API
• Design and engineer network data flow to implement and improve new connections or troubleshoot existing communications
• Produce documentation such as data flows, data dictionaries, user guides, operating procedures, systems design documents, disaster recovery documentation
• Interface with company executives and government technical management or executive level personnel
• Support communications within major cloud environments such as Azure, AWS, GCP
• Periodic review and improvement of disaster recovery needs
• Deploy and manage virtual servers in the cloud
• Deploy and manage private service edges
• Tune data protection standards
• Provide guidance on all aspects of Zscaler network and security capabilities for the customer
• Support additional third-party network and security products as needed
• Provide internal consulting, technical guidance, information and support to application developers, computer operations, company management and departmental clients
• Assist in internal training programs
• Work on-site 5 days per week with the team in Arlington, VA

Zscaler Engineer

Security Analyst

• Perform comprehensive systems and network analysis of intrusions targeting network infrastructure, applications, operating systems, firewalls, proxy devices, and malware detection systems using Splunk SIEM platform
• Conduct in-depth network security analysis and collaborate with SOC analyst team on preliminary incident response, event analysis, and threat intelligence activities
• Investigate security threats across multiple data types, timeframes, hosts, and identities; initiate incident review cases for notable security events
• Monitor information security alerts through Splunk to respond, triage, and escalate incidents as appropriate
• Process alerts from diverse security tools including firewalls, intrusion detection systems (IDS), operating systems, antivirus solutions, web application firewalls, and web servers
• Capture and document notable events within Splunk for forensic investigation and replay using saved search libraries
• Perform continuous environmental monitoring to identify and recommend remediation strategies for unauthorized activities
• Provide strategic analysis and real-time auditing, investigating, reporting, and remediation coordination for security incident tracking

Cybersecurity Analyst

Network Engineer

• Track and diagnose LAN, WAN, WLAN, and data center network infrastructure issues
• Participate in network refreshes, network migrations, and ISP cutovers
• Upgrade firmware/software of network devices
• Manage asset inventory including EOL and EOS status
• Coordinate with cross-functional teams and collaborate with other IT departments, vendors, and stakeholders
• Act as final point of escalation for complex incidents and critical outages
• Perform in-depth troubleshooting and root cause analysis for network issues
• Lead design, migration, and upgrade projects across Cisco and Palo Alto platforms
• Oversee data center installations, address operational issues, and manage support tickets
• Troubleshoot and manage on-prem to cloud connectivity
• Provide architectural inputs for upcoming technological implementations
• Develop and publish SOPs, HLDs and LLDs, and detailed network diagrams
• Handle escalations from NOC L1, L2 and the global network team
• Review and recommend improvements to the existing network infrastructure
• Engage vendors as required for ongoing issues
• Define SOPs, runbooks, and best practices for network operations
• Continually assess the region's network capacity and availability

Senior Network Engineer

• Support a major customer in ongoing operations, support, and engineering with regards to the full Zscaler product suite (ZIA, ZPA, ZDX, ZCC) and related technologies
• Configure and tune the system to optimize performance and/or alerting
• Integrate solutions with third party technology solutions through the API
• Design and engineer network data flow to implement and improve new connections; or troubleshooting existing communications
• Produce documentation such as data flows, data dictionaries, user guides, operating procedures, systems design documents, disaster recovery documentation, etc.
• Interface with company executives as well as government technical management or executive level personnel
• Support communications within major cloud environments such as Azure, AWS, GCP
• Periodic review and improvement of disaster recovery needs
• Deploy and manage virtual servers in the cloud
• Deploy and manage private service edges
• Tuning of data protection standards
• Provide guidance on all aspects of Zscaler network and security capabilities for the customer
• Support of additional third-party network and security products as needed
• Support of cloud service providers (Azure, AWS, GCP) as needed
• Provide internal consulting, technical guidance, information and support to application developers, computer operations, company management and departmental clients
• Assist in internal training programs
• Work 5 days onsite per week with the team in Arlington, VA; support federal customer environments and comply with Federal Entry of Duty BI process

• Design, develop, and deploy custom and AWS-native security policies (e.g., SCPs, IAM policies, AWS Config Rules) across AWS accounts.
• Perform pre-deployment compliance assessments and identify non-compliant configurations in AWS environments.
• Collaborate with application and infrastructure teams to remediate misconfigurations and implement secure-by-design practices.
• Validate and monitor policy effectiveness post-deployment using tools like AWS Config, Security Hub, CloudTrail, and GuardDuty.
• Own and manage the AWS policy exemption workflow — review exception requests, conduct risk assessments, and track approvals.
• Maintain detailed documentation on policy changes, enforcement status, and exception decisions.
• Participate in tool evaluations and implementations that support cloud security posture management and automation.
• Support continuous improvement of cloud security posture through quarterly reviews, metrics, and tuning recommendations.

Cloud Security Engineer

• Manage, administer, and optimize Tanium modules including Enforce, Threat Response, Comply, Interact, Patch, Deploy, Certificate Manager, Performance, Investigate, and Impact.
• Configure and apply security baselines and policies (Enforce).
• Conduct real-time threat hunting, forensics, and incident response (Threat Response & Investigate).
• Monitor and report endpoint compliance against CIS, NIST, and custom baselines (Comply).
• Design and execute patch deployment strategies and software rollouts (Patch & Deploy).
• Track, manage, and alert on endpoint certificates across the enterprise (Certificate Manager).
• Monitor and analyze endpoint performance metrics and operational impact (Performance & Impact).
• Build and optimize Tanium sensors, packages, and saved questions for visibility and control (Interact).
• Develop custom Tanium content (sensors, packages, dashboards) tailored to business and security requirements.
• Automate endpoint management tasks using PowerShell, Python, Shell, or VBScript.
• Integrate Tanium with SIEM, ITSM, configuration management, and XDR tools.
• Collaborate with security, infrastructure, and endpoint teams to support compliance, incident response, and operational efficiency.
• Provide documentation, training, and knowledge transfer to stakeholders and internal teams.
• Support lifecycle upgrades and health of Tanium infrastructure and endpoints.

Senior Security Analyst, Tanium

• Make a difference here.
• UltraViolet Cyber is a leading platform-enabled unified security operations company providing a comprehensive suite of security operations solutions. Founded and operated by security practitioners with decades of experience, the UltraViolet Cyber security-as-code platform combines technology innovation and human expertise to make advanced real-time cybersecurity accessible for all organizations by eliminating risks of separate red and blue teams.
• By creating continuously optimized identification, detection, and resilience from today’s dynamic threat landscape, UltraViolet Cyber provides both managed and custom-tailored unified security operations solutions to the Fortune 500, Federal Government, and Commercial clients. UltraViolet Cyber is headquartered in McLean, Virginia, with global offices across the U.S. and in India.
• We are seeking a Senior Security Engineer to implement and manage advanced security solutions with a focus on Mandiant and Proofpoint technologies within federal government environments. This role will be responsible for security architecture, threat detection, incident response, and email security operations across critical government infrastructure.
• Work Environment
• Hybrid work model with 2 day/week on-site presence near National Harbor, Maryland
• Must maintain required security clearance
• Participation in on-call rotation for security incident response

Senior Security Engineer - Security Operations

UltraViolet Cyber is seeking an exceptional Senior Cybersecurity Sales Account Executive to join our rapidly growing team. In this critical role, you will be responsible for driving revenue growth and expanding our market presence within the enterprise sector by effectively selling our cutting-edge cybersecurity services and solutions. As a successful candidate, you will have a proven track record of exceeding sales targets and building strong relationships with C-level executives. You will be a strategic thinker, able to understand our clients' needs and recommend comprehensive solutions that align with their cybersecurity requirements. You will be a self-starter, motivated to drive new business and exceed revenue targets.

Associate SOC Analyst

DevOps Engineer

Senior Security Engineer – Tanium

Director, Technical Account Management

Senior SOC Manager, Federal

Network Security Engineer

Senior Security Analyst, SOC

Zscaler Engineer

Cybersecurity Analyst

Senior Network Engineer

Network Security Engineer

Cloud Security Engineer

Senior Security Analyst, Tanium

Senior Security Engineer - Security Operations

Account Executive, Cybersecurity Services