Senior Security Engineer

UltraViolet Cyber is seeking a Senior Security Engineer to support a Federal customer from Arlington, VA (onsite). In this role, you will help investigate and remediate vulnerabilities, support incident handling activities, and strengthen detection and vulnerability management across production environments.

The work spans multiple security domains, including identity and access management, compliance-focused security engineering, and Microsoft enterprise and security technologies. You will collaborate with system engineers, architects, and technical stakeholders while translating findings into risk-based reporting and actionable guidance.

What you’ll do

• Investigate, validate, prioritize, and remediate vulnerabilities across endpoints, servers, cloud services, and applications.
• Produce clear, risk-based summaries of security assessment results and contribute to actionable reporting.
• Assist with selecting and applying information security controls in coordination with system engineers, architects, and other technical stakeholders.
• Support incident handling and response, digital forensics, threat detection, and vulnerability management processes.
• Use SIEM, SOAR, EDR, cloud services, and Microsoft enterprise technologies including O365, Azure, Defender, and Entra.
• Contribute to security planning, assessments, risk analysis, risk management, certification, and awareness activities for systems and networks.
• Analyze security issues and help develop effective remediation strategies.
• Communicate security concepts, risks, and recommendations to both technical and non-technical audiences.
• Assist with vulnerability remediation and coordinate with teams to support timely resolution.
• Help optimize the Microsoft Defender suite, including Defender for Endpoint, Defender for Cloud, Defender for Identity, and Defender for Office 365.
• Assist with Microsoft Purview capabilities, including data classification, sensitivity labels, Data Loss Prevention, and eDiscovery workflows.
• Write and tune Kusto Query Language (KQL) queries in Microsoft Sentinel, Defender, and Log Analytics to support detection and investigation.
• Contribute to review and improvement of security controls using findings from assessments and red or blue team engagements.
• Help develop guidance and documentation for security controls, compliance requirements, and governance in the Microsoft cloud environment.

Required qualifications

• Ability to attain DHS EOD.
• Education and experience per contract requirements: BA and 10 years, or AA and 12 years.
• Active Security+ CE certification.
• Demonstrated experience with Conditional Access Policies (CAPs), Azure AD/Entra, and Zero Trust principles.
• Experience in one or more areas: incident response, digital forensics, vulnerability management, identity and access management, threat detection, or security engineering.
• Exposure to cybersecurity assessments such as vulnerability assessments, threat assessments, application security, or infrastructure security.
• Familiarity with Cyber and NIST policy, Risk Management Framework, and implementation of security mitigations.
• Strong analytical and problem-solving skills with a focus on optimizing security workflows.
• Professional, customer-oriented approach and calm under pressure.
• Effective written and verbal communication across stakeholder levels.

Tools and technologies

• SIEM, SOAR, EDR
• O365, Azure
• Defender, Entra
• Microsoft Defender for Endpoint, Defender for Cloud, Defender for Identity, Defender for Office 365
• Microsoft Purview, Data Loss Prevention, eDiscovery
• Kusto Query Language (KQL), Microsoft Sentinel, Log Analytics
• Conditional Access Policies (CAPs), Azure AD, Zero Trust principles
• DHS EOD, NIST, Risk Management Framework

Salary: USD 100,000 - 130,000 per year.

Location: Arlington, VA (onsite).