--- title: 'Senior Security Engineer - Splunk at UltraViolet Cyber' canonical: 'https://feeny.ai/job/senior-security-engineer-splunk-ultraviolet-cyber-national-harbor-yx5w5qrxn343' type: 'job' last_seen: '2026-09-12' --- # Senior Security Engineer - Splunk at UltraViolet Cyber - **Company:** UltraViolet Cyber - **Location:** National Harbor, MD - **Compensation:** $140k–$175k - **Employment:** full-time - **Work type:** hybrid - **Posted:** 2026-08-20 - **Last confirmed live:** 2026-09-12 - **Apply:** https://jobs.lever.co/uvcyber/7c6c0765-0225-4339-9822-c41df64f6c3f ## Job description Make a difference here. UltraViolet Cyber is a leading platform-enabled unified security operations company providing a comprehensive suite of security operations solutions. Founded and operated by security practitioners with decades of experience, the UltraViolet Cyber security-as-code platform combines technology innovation and human expertise to make advanced real-time cybersecurity accessible for all organizations by eliminating risks of separate red and blue teams. By creating continuously optimized identification, detection, and resilience from today’s dynamic threat landscape, UltraViolet Cyber provides both managed and custom-tailored unified security operations solutions to the Fortune 500, Federal Government, and Commercial clients. UltraViolet Cyber is headquartered in McLean, Virginia, with global offices across the U.S. and in India. Our Federal Delivery team is seeking a Senior Security Engineer specializing in Splunk to enhance our security monitoring, detection, and response capabilities within federal government environments. This role will be responsible for designing, implementing, and optimizing Splunk deployments to support advanced threat detection, security analytics, and compliance monitoring across critical infrastructure. What You'll Do: - Design, implement, and maintain complex Splunk deployments for security monitoring, threat detection, data ingestion, and search optimization - Document and map the architecture of current Splunk infrastructure and lead the development of a security engineering roadmap for future improvements. - Develop and optimize Splunk searches, dashboards, and alerts to enhance security operations - Define and manage index clustering, search head clustering, and forwarder deployment. - Lead end-to-end Splunk deployment and configuration projects, including infrastructure planning, installation, and integration. - Troubleshoot complex Splunk issues involving search performance, indexing, ingestion, parsing, data availability, clustering, storage, authentication, configuration, and integrations with other security tools, as well as providing root-cause analysis of Splunk outages, degradation, data loss, ingestion issues and performance problems. - Conduct performance tuning and capacity planning for Splunk Environments - Collaborate with cross-functional teams to integrate Splunk with other security tools and data sources and analyze how Splunk interacts with other security tools throughout the broad security ecosystem. - Help lead discussions regarding Splunk optimization, modernization, consolidation, automation, scalability, and efficiency and develop recommendations for improving Splunk reliability, and availability - Lead the Cribl to Splunk integration and data pipeline optimization, ensuring efficient routing, filtering, transformation, and delivery data into Splunk as well as improve data quality, reduce ingestion, and enhance overall platform performance - Serve as the team’s point of contact for security tool operation and management and provide support to Splunk engineers and cross-functional teams. - Embed Splunk across a wide range of tools across Enterprise IT operations to ingest endpoint and firewall logs, analyze vulnerability scanning data, enhance privileged access monitoring and audit logging, monitor encryption and key management, and enhance threat detection and incident response. - Integrate tools such as CrowdStrike, Cribl, CyberArk, Tenable, CASB, Trellix, Axonius, and others. What You've Done: - US Citizenship is Required for hire and ability to clear Government clearance process - Master's degree in Cybersecurity, Information Security, or related field, plus 12 years of experience - 7+ years of security engineering experience with 3+ years of advanced Splunk implementation - Splunk Certified Architect or Splunk Certified Enterprise Security Admin certification - Experience designing and implementing Splunk Enterprise Security in large environments, along with Cribl - Strong knowledge of SPL query language and advanced search techniques - Experience creating custom Splunk dashboards, reports, and visualizations - Demonstrated expertise in security monitoring and SIEM technology - Experience implementing security controls per NIST SP 800-53 requirements - Proficiency with Splunk administration and performance tuning Preferred Qualifications: - Experience supporting federal agency security operations centers - Splunk and Cribl certifications highly desired - Additional security certifications (CISSP, GCIA, GCIH, Security+) - Experience with Splunk implementations - Background in security architecture for government networks - Knowledge of CISA directives and CDM program requirements - Experience with cloud security monitoring using Splunk and Cribl - Familiarity with Zero Trust architecture implementation Work Environment: - Hybrid work model with 3 day/week on-site presence near National Harbor, Maryland - Must be able to pass a Federal background investigation - US Citizenship required - Participation in on-call rotation for security incident response - Collaboration with cross-agency security teams What We Offer: - 401(k), including an employer match of 100% of the first 3% contributed and 50% of the next 2% contributed - Medical, Dental, and Vision Insurance (available on the 1st day of the month following your first day of employment) - Group Term Life, Short-Term Disability, Long-Term Disability - Voluntary Life, Hospital Indemnity, Accident, and/or Critical Illness - Participation in the Discretionary Time Off (DTO) Program - 11 Paid Holidays Annually UltraViolet Cyber maintains broad salary ranges for its roles in order to account for variations in knowledge, skills, experience, market conditions and locations, as well as reflect our company's differing products, services, industries and lines of business. Candidates are typically placed into the range based on the preceding factors. We sincerely thank all applicants in advance for submitting their interest in this position. We know your time is valuable. UltraViolet Cyber welcomes and encourages diversity in the workplace regardless of race, gender, religion, age, sexual orientation, gender identity, disability, or veteran status. If you want to make an impact, UltraViolet Cyber is the place for you! ## About UltraViolet Cyber ## Company Overview - **One-liner**: UltraViolet Cyber is a tech-enabled managed security services provider that unifies offensive and defensive cybersecurity operations to protect Global 2000 and Federal Government customers. - **Entity Type**: Private (Series A in 2017; Private Equity round in 2023) - **Headquarters**: McLean, Virginia, United States - **Founded**: Not publicly available (earliest known funding round: 2017) - **Founders**: Not publicly available (leadership includes CEO Ira Goldstein and President/COO Atif Ghauri) ## Core Business - **Primary industry**: Cybersecurity (Managed Security Services Provider, MSSP) - **Target customers**: Global 2000 enterprises and U.S. Federal Government agencies (B2B, Enterprise, Government) - **Mission**: "To enable secure, resilient operations so our customers can serve, innovate, and lead with confidence." ## Products & Services - **UV Lens**: Flagship security-as-a-service solution that removes operational silos and integrates security capabilities (SaaS/Managed Service). - **Managed Detection & Response (MDR)**: 24/7 threat monitoring and response (Service). - **SOC as-a-Service**: Outsourced Security Operations Center (Service). - **Continuous Penetration Testing**: Ongoing offensive security assessments (Service). - **Continuous Threat Exposure Management**: Proactive vulnerability identification and prioritization (Service). - **Dedicated Defense**: Custom, dedicated security teams for clients (Service). ## Market Standing - **Valuation/Market Cap**: Not disclosed - **Key Metric**: Total funding of $4.1M (one Series A round in 2017 and one Private Equity round in 2023) - **Notable Investors/Partners**: Not publicly named (one investor in the 2023 PE round); acquired Black Duck’s Application Security Testing Services Business. - **Growth Signals**: - Ranked #2642 on Inc. 5000 list of America’s Fastest-Growing Private Companies. - Ranked #19 on MSSP Alert's Top 250 MSSPs. - 509 employees (as of mid-2026) with offices in McLean (HQ), Lehi (UT), Phoenix (AZ), Hyderabad (India), and remote workers in UK and Canada. - 52,000+ LinkedIn followers with monthly growth of +1.1%. - Active job postings: 34 (monthly increase of +9.7%). ## Competitive Advantages - **First-to-market unified security operations**: Combines red (offensive) and blue (defensive) teams under one platform – the "UltraViolet" approach. - **Founding pedigree**: Led by cybersecurity experts trained by the NSA and Federal Government, giving deep intelligence community expertise. - **Security-as-code platform**: Delivers integrated capabilities through a potent, automated platform rather than siloed tools. - **Customer base**: Serves Global 2000 and Federal clients, indicating high trust and stringent compliance requirements. ## Strategic Focus - **Current priorities**: Scaling the unified security operations model, expanding tech-enabled managed services, and deepening partnerships with enterprise and government clients. - **Innovation in delivery**: Custom solutions and innovative delivery models to disrupt the traditional MSSP market. - **Growth direction**: Continued hiring (34 open roles across engineering, sales, consulting) and geographic expansion (notably in India and UK). ## Why Work Here - **Culture**: "Growing community of professionals passionate about cybersecurity, innovation, accountability, consistency, and a strong will to win." Emphasis on transparency, collaboration, and delivery excellence. - **Work policy**: Hybrid and remote options available (roles in Lehi, UT; Salt Lake City; Bluemont, VA; Hyderabad, India; and fully remote positions for engineers and consultants). - **Benefits**: Excellent benefits, compensation, training, 401k, and paid time off. Career advancement opportunities through dynamic project work. - **Engineering culture**: Hands-on with cutting-edge security tech; teams include red team consultants, cloud security engineers, SOC analysts, and DevOps engineers. - **Salary examples** (from Indeed): Cloud Security Engineer $100k–$150k, Associate Principal Red Team Consultant $165k–$195k, SOC Analyst ~$101k, Security Engineer ~$142k. ## Sources 1. [uvcyber.com/careers](https://www.uvcyber.com/careers) 2. [uvcyber.com/about](https://www.uvcyber.com/about) 3. [linkedin.com/company/uvcyber](https://linkedin.com/company/uvcyber) 4. [indeed.com/cmp/Ultraviolet-Cyber](https://www.indeed.com/cmp/Ultraviolet-Cyber) ## Other roles at UltraViolet Cyber - [Senior SOC Analyst | MDR](https://feeny.ai/job/senior-soc-analyst-mdr-ultraviolet-cyber-remote-ve8vz6pdbdkn) - [Security Analyst, Attack Surface Management](https://feeny.ai/job/security-analyst-attack-surface-management-ultraviolet-cyber-hyderabad-exq15855gvtk) — Hyderabad, India - [Senior Cybersecurity Incident Response Specialist](https://feeny.ai/job/senior-cybersecurity-incident-response-specialist-ultraviolet-cyber-hyderabad-w0rwp8q4p57s) — Hyderabad, India - [Automation Data Integration Engineer](https://feeny.ai/job/automation-data-integration-engineer-ultraviolet-cyber-washington-s5kcx7gvh338) — Washington, DC - [Principal Cyber Security Solutions Architect](https://feeny.ai/job/principal-cyber-security-solutions-architect-ultraviolet-cyber-national-harbor-nrzczr3dqkka) — National Harbor, MD - [Systems Administrator (RHEL)](https://feeny.ai/job/systems-administrator-rhel-ultraviolet-cyber-herndon-ntn1e24y27bc) — Herndon, VA - [Information Security Systems Engineer (RHEL Focus)](https://feeny.ai/job/information-security-systems-engineer-rhel-focus-ultraviolet-cyber-herndon-tqww8j7m6ncn) — Herndon, VA - [Security Engineer (Active Secret Clearance)](https://feeny.ai/job/security-engineer-active-secret-clearance-ultraviolet-cyber-herndon-5jvh7v1ww82a) — Herndon, VA - [Sr. Accountant](https://feeny.ai/job/sr-accountant-ultraviolet-cyber-hyderabad-gnf39m1yzp2a) — Hyderabad, India - [Senior Security Engineer - Crowdstrike](https://feeny.ai/job/senior-security-engineer-crowdstrike-ultraviolet-cyber-national-harbor-rke6gveen9yn) — National Harbor, MD