Senior Security Tools Engineer: Cross-Tool Detection

UltraViolet Cyber; Washington (District of Columbia); Hybrid; USD 135,000 - 160,000; Full time

Benefits offered by this job

401(k) with employer match

Medical, Dental, Vision Insurance

Group Term Life, Short-Term & Long/Dis

Voluntary Life, Hospital Indemnity, A‑

Discretionary Time Off (DTO) Program

11 Paid Holidays Annually

Job summary

UltraViolet Cyber is seeking a Senior Security Tools Engineer to support the security tools environment on the Security Tools program. This hybrid role is based in Oxon Hill, MD, with three days per week onsite near National Harbor.

Lead cross-tool security engineering across endpoint, SIEM, and other tools to close gaps and improve detection and reporting. The candidate will integrate tools like CrowdStrike, Splunk, Cribl, CyberArk, Suricata, Tenable, Tanium, Thales, CASB, Trellix, and Axonius,

Qualifications

• 12+ years of relevant security engineering experience across tools.
• Hands-on experience with CrowdStrike Falcon and Splunk.
• Scripting/automation in Python or PowerShell.
• Effective communicator at all levels, customer-oriented.

Responsibilities

• Lead cross-tool security engineering efforts across endpoints and SIEM.
• Diagnose and resolve reporting gaps when tools are deprecated or replaced.
• Design data flows and integration points across the stack.
• Build and tune detection logic, correlations, and dashboards.
• Lead transition work during tool deprecation to preserve coverage.
• Develop automation via APIs to reduce manual work.
• Support threat hunting and incident response across tools.
• Maintain documentation of configurations and architecture.

Skills

CrowdStrike Falcon

Splunk

Python

PowerShell

Automation

Education

Master's degree or equivalent

Tools

CrowdStrike

Splunk

Cribl

CyberArk

Suricata

Tenable

Tanium

Thales

CASB

Trellix

Axonius

Job description

UltraViolet Cyber is seeking a Senior Security Tools Engineer to support the security tools environment on the Security Tools program. This hybrid role is based in Oxon Hill, MD, with three days per week onsite near National Harbor.

Lead cross-tool security engineering across endpoint, SIEM, and other tools to close gaps and improve detection and reporting. The candidate will integrate tools like CrowdStrike, Splunk, Cribl, CyberArk, Suricata, Tenable, Tanium, Thales, CASB, Trellix, and Axonius,