--- title: 'Senior Cloud Security & Compliance Engineer at UltraViolet Cyber' canonical: 'https://feeny.ai/job/senior-cloud-security-compliance-engineer-ultraviolet-cyber-remote-mdkm4srmeqva' type: 'job' last_seen: '2026-10-17' --- # Senior Cloud Security & Compliance Engineer at UltraViolet Cyber - **Company:** UltraViolet Cyber - **Location:** Remote - **Compensation:** $120k–$170k - **Work type:** remote - **Posted:** 2026-10-13 - **Last confirmed live:** 2026-10-17 - **Apply:** https://jobs.lever.co/uvcyber/a22e6f9c-5c49-4723-a518-150a2ebde547 ## Job description Make a difference here. UltraViolet Cyber is a leading platform-enabled unified security operations company providing a comprehensive suite of security operations solutions. Founded and operated by security practitioners with decades of experience, the UltraViolet Cyber security-as-code platform combines technology innovation and human expertise to make advanced real-time cybersecurity accessible for all organizations by eliminating risks of separate red and blue teams. By creating continuously optimized identification, detection, and resilience from today’s dynamic threat landscape, UltraViolet Cyber provides both managed and custom-tailored unified security operations solutions to the Fortune 500, Federal Government, and Commercial clients. UltraViolet Cyber is headquartered in McLean, Virginia, with global offices across the U.S. and in India. We are seeking a hands-on cloud security engineer to serve as a primary technical resource for the Wiz platform. The team member will administer Wiz, develop custom policies as code, and automate FedRAMP and NIST SP 800-53 controls across multi-cloud environments. Experience with FedRAMP or NIST SP 800-53 is preferred but not required; however, candidates must satisfy applicable U.S. regulatory requirements for work in FedRAMP environments. Python and Terraform will be used daily. What You'll Do: - Improve cloud security posture through practical, scalable policy engineering. - Increase finding quality by reducing false positives and improving detection accuracy. - Deliver reusable Terraform modules and secure-by-default infrastructure patterns. - Enable engineering teams to remediate risk efficiently through automation and clear guidance. - Support FedRAMP and other regulated cloud environments with effective technical controls and continuous monitoring. - Build scalable security capabilities across AWS, Azure, and GCP. - Strengthen the organization’s ability to identify, understand, and remediate cloud security risk. What You Have: US Citizenship is Required - Cloud security engineering: At least five years of hands-on experience. - Wiz or equivalent CNAPP experience: Production administration, custom rules or Cloud Configuration Rules, policies, and integrations. Experience with Prisma Cloud, Orca, Microsoft Defender for Cloud, or Lacework is acceptable when paired with a demonstrated ability to ramp quickly on Wiz. - Python: Proficiency in scripting, automation, and API integrations, including the Wiz GraphQL API, boto3, or similar tools. - Multi-cloud expertise: Deep AWS experience plus strong experience with either Azure or GCP, along with working knowledge of all three platforms. - Terraform/HCL: Experience developing reusable, secure-by-default modules. - Policy as code: Experience with OPA/Rego or an equivalent framework; Wiz custom rules use Rego. - Finding triage: Ability to assess exploitability and blast radius, prioritize risk, and tune false positives. Preferred Qualifications - Experience with NIST SP 800-53, FedRAMP, GovCloud, or Impact Level environments, including mapping controls to technical guardrails. - Experience with Kubernetes manifests and container security. - Experience integrating security controls into CI/CD platforms such as GitHub Actions, GitLab, or Jenkins. - Experience supporting audits and continuous monitoring (ConMon). - Experience mentoring engineers and leading technical discussions. - Relevant security certifications, such as AWS Certified Security – Specialty, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Professional Cloud Security Engineer, or CCSP. UltraViolet Cyber maintains broad salary ranges for its roles in order to account for variations in knowledge, skills, experience, market conditions and locations, as well as reflect our company's differing products, services, industries and lines of business. Candidates are typically placed into the range based on the preceding factors. We sincerely thank all applicants in advance for submitting their interest in this position. We know your time is valuable. UltraViolet Cyber welcomes and encourages diversity in the workplace regardless of race, gender, religion, age, sexual orientation, gender identity, disability, or veteran status. If you want to make an impact, UltraViolet Cyber is the place for you! ## About UltraViolet Cyber ## Company Overview - **One-liner**: UltraViolet Cyber is a tech-enabled managed security services provider that unifies offensive and defensive cybersecurity operations to protect Global 2000 and Federal Government customers. - **Entity Type**: Private (Series A in 2017; Private Equity round in 2023) - **Headquarters**: McLean, Virginia, United States - **Founded**: Not publicly available (earliest known funding round: 2017) - **Founders**: Not publicly available (leadership includes CEO Ira Goldstein and President/COO Atif Ghauri) ## Core Business - **Primary industry**: Cybersecurity (Managed Security Services Provider, MSSP) - **Target customers**: Global 2000 enterprises and U.S. Federal Government agencies (B2B, Enterprise, Government) - **Mission**: "To enable secure, resilient operations so our customers can serve, innovate, and lead with confidence." ## Products & Services - **UV Lens**: Flagship security-as-a-service solution that removes operational silos and integrates security capabilities (SaaS/Managed Service). - **Managed Detection & Response (MDR)**: 24/7 threat monitoring and response (Service). - **SOC as-a-Service**: Outsourced Security Operations Center (Service). - **Continuous Penetration Testing**: Ongoing offensive security assessments (Service). - **Continuous Threat Exposure Management**: Proactive vulnerability identification and prioritization (Service). - **Dedicated Defense**: Custom, dedicated security teams for clients (Service). ## Market Standing - **Valuation/Market Cap**: Not disclosed - **Key Metric**: Total funding of $4.1M (one Series A round in 2017 and one Private Equity round in 2023) - **Notable Investors/Partners**: Not publicly named (one investor in the 2023 PE round); acquired Black Duck’s Application Security Testing Services Business. - **Growth Signals**: - Ranked #2642 on Inc. 5000 list of America’s Fastest-Growing Private Companies. - Ranked #19 on MSSP Alert's Top 250 MSSPs. - 509 employees (as of mid-2026) with offices in McLean (HQ), Lehi (UT), Phoenix (AZ), Hyderabad (India), and remote workers in UK and Canada. - 52,000+ LinkedIn followers with monthly growth of +1.1%. - Active job postings: 34 (monthly increase of +9.7%). ## Competitive Advantages - **First-to-market unified security operations**: Combines red (offensive) and blue (defensive) teams under one platform – the "UltraViolet" approach. - **Founding pedigree**: Led by cybersecurity experts trained by the NSA and Federal Government, giving deep intelligence community expertise. - **Security-as-code platform**: Delivers integrated capabilities through a potent, automated platform rather than siloed tools. - **Customer base**: Serves Global 2000 and Federal clients, indicating high trust and stringent compliance requirements. ## Strategic Focus - **Current priorities**: Scaling the unified security operations model, expanding tech-enabled managed services, and deepening partnerships with enterprise and government clients. - **Innovation in delivery**: Custom solutions and innovative delivery models to disrupt the traditional MSSP market. - **Growth direction**: Continued hiring (34 open roles across engineering, sales, consulting) and geographic expansion (notably in India and UK). ## Why Work Here - **Culture**: "Growing community of professionals passionate about cybersecurity, innovation, accountability, consistency, and a strong will to win." Emphasis on transparency, collaboration, and delivery excellence. - **Work policy**: Hybrid and remote options available (roles in Lehi, UT; Salt Lake City; Bluemont, VA; Hyderabad, India; and fully remote positions for engineers and consultants). - **Benefits**: Excellent benefits, compensation, training, 401k, and paid time off. Career advancement opportunities through dynamic project work. - **Engineering culture**: Hands-on with cutting-edge security tech; teams include red team consultants, cloud security engineers, SOC analysts, and DevOps engineers. - **Salary examples** (from Indeed): Cloud Security Engineer $100k–$150k, Associate Principal Red Team Consultant $165k–$195k, SOC Analyst ~$101k, Security Engineer ~$142k. ## Sources 1. [uvcyber.com/careers](https://www.uvcyber.com/careers) 2. [uvcyber.com/about](https://www.uvcyber.com/about) 3. [linkedin.com/company/uvcyber](https://linkedin.com/company/uvcyber) 4. [indeed.com/cmp/Ultraviolet-Cyber](https://www.indeed.com/cmp/Ultraviolet-Cyber) ## Other roles at UltraViolet Cyber - [Sr Manager, Incident Response](https://feeny.ai/job/sr-manager-incident-response-ultraviolet-cyber-san-jose-6mav97w9zxzb) — San Jose, CA - [Senior Security Engineer](https://feeny.ai/job/senior-security-engineer-ultraviolet-cyber-arlington-y8x999w9gjfq) — Arlington, VA - [AWS Cloud Security Engineer (Top Secret)](https://feeny.ai/job/aws-cloud-security-engineer-top-secret-ultraviolet-cyber-springfield-xbnjwbwsjry5) — Springfield, VA - [Senior Microsoft Cloud Security Engineer](https://feeny.ai/job/senior-microsoft-cloud-security-engineer-ultraviolet-cyber-arlington-fy2wax9pqq0x) — Arlington, VA - [Process Specialist](https://feeny.ai/job/process-specialist-ultraviolet-cyber-washington-czj5pt3av0ht) — Washington, DC - [Senior Business Process Consultant](https://feeny.ai/job/senior-business-process-consultant-ultraviolet-cyber-washington-09atzkrnap8f) — Washington, DC - [Cybersecurity Analyst](https://feeny.ai/job/cybersecurity-analyst-ultraviolet-cyber-portland-d3mh333v4fzg) — Portland, OR - [Project Manager](https://feeny.ai/job/project-manager-ultraviolet-cyber-bengaluru-vdyp8znc2snv) — Bengaluru, India - [Project Manager](https://feeny.ai/job/project-manager-ultraviolet-cyber-bengaluru-sbm274pf77en) — Bengaluru, India - [Principal Cyber Security Solutions Architect](https://feeny.ai/job/principal-cyber-security-solutions-architect-ultraviolet-cyber-national-harbor-nrzczr3dqkka) — National Harbor, MD