Senior Security Engineer - Crowdstrike
UltraViolet Cyber3 months ago
Base Salary
$135k - $150k/yr
Responsibilities
- Lead cross-tool security engineering efforts and advise on closing detection and reporting gaps across multiple platforms.
- Diagnose and resolve visibility and reporting gaps caused by deprecated, replaced, or reconfigured tools.
- Design, implement, and document data flows and integrations across endpoint protection, SIEM, and other security tools.
- Build and tune detection logic, correlation searches, dashboards, and cross-tool security workflows.
- Lead security tool transition and migration work while preserving detection and reporting coverage.
- Integrate CrowdStrike, Splunk, Cribl, CyberArk, Suricata, Tenable, Tanium, Thales, CASB, Trellix, Axonius, and other security platforms.
- Develop API-based automation and correlation workflows to reduce manual reporting and analysis.
- Support threat hunting, incident response, security compliance, and cross-tool troubleshooting.
- Maintain accurate documentation of tool configurations, data flows, and integration architecture.
- Serve as the team's point of contact for cross-tool security engineering issues.
Requirements
- Ability to attain DHS EOD and pass a federal background investigation; US citizenship is required.
- Master's degree or equivalent plus 12 years of relevant experience.
- Hands-on experience across multiple security tool categories, including endpoint/EDR, SIEM, vulnerability management, or network detection.
- Hands-on experience administering, developing detections for, or responding with an EDR platform such as CrowdStrike Falcon.
- Hands-on Splunk experience, including search, correlation searches, and dashboard or reporting development.
- Experience integrating and correlating data across disparate security platforms to close visibility, detection, or reporting gaps.
- Proficiency with Python, PowerShell, or similar scripting and automation technologies for data pipelines and API integrations.
- Experience owning a security tool deprecation or migration without losing detection or reporting coverage.
- Effective written and verbal communication skills with a professional, customer-oriented approach.
- Preferred qualifications include federal SOC experience, CISSP, GIAC, or Security+ certifications, CrowdStrike cloud workload protection experience, CISA directive and CDM knowledge, threat hunting and advanced persistent threat detection experience, security orchestration and automation experience, and Zero Trust Architecture implementation familiarity.
- Participation in an on-call rotation for security incident response.
Benefits
- Hybrid work model with three days per week onsite near National Harbor, Maryland.
- 401(k) with an employer match of 100% of the first 3% contributed and 50% of the next 2% contributed.
- Medical, dental, and vision insurance available on the first day of the month following the first day of employment.
- Group term life, short-term disability, and long-term disability insurance.
- Voluntary life, hospital indemnity, accident, and critical illness coverage.
- Discretionary Time Off program.
- 11 paid holidays annually.
About UltraViolet Cyber
UltraViolet Cyber provides managed security operations that unify red, blue, and purple team capabilities via a platform-enabled, security-as-code model. It serves Global 2000 enterprises and U.S. federal agencies with continuous testing, detection, and response, plus AI system testing and governance services. The privately held company is headquartered in McLean, Virginia, and is ranked #19 on the Top 250 MSSP list.