{"id":124229,"url":"https://alion.io/job/ultraviolet-cyber-senior-security-engineer-crowdstrike","title":"Senior Security Engineer - Crowdstrike","company":{"id":716716,"name":"Uvcyber","domain":"uvcyber.com","url":"https://alion.io/company/uvcyber","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"B","score":83,"open_postings":6,"ghost_share":0,"stale_share":0.667,"repost_share":0,"time_to_fill_p50_days":48,"computed_at":"2026-10-22T06:10:10Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["National Harbor, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":135000,"max":150000,"currency":"USD","period":"year","gross":null,"usd_annual":150000},"salary_estimate":null,"experience_years_min":12,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Crowdstrike","optional":false},{"name":"CyberArk","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Suricata","optional":false},{"name":"Tanium","optional":false},{"name":"Zero Trust","optional":true}],"status":"live","first_seen_at":"2026-08-03T17:57:25Z","employer_posted_date":"2026-08-03","last_verified_at":"2026-10-22T23:22:56Z","board_verified":true,"closed_at":null,"days_open":80,"trust":{"level":"ok","repost_count":1,"flags":[],"days_open":79},"description":"UltraViolet Cyber is seeking a Senior Security Tools Engineer to support the security tools environment on the Security Tools program. This is a hybrid role based in Oxon Hill, MD, with three days per week onsite. We are seeking a technical resource with experience diagnosing and closing detection and reporting gaps that span multiple security platforms - someone who can work across endpoint, SIEM, and adjacent tools rather than inside a single product. This role will include supporting tool integration initiatives, closing gaps created by tool deprecations or replacements, and supporting security automation across the stack.\nThe Senior Security Tools Engineer should feel comfortable not only diagnosing cross-tool problems but assisting with escalations and onsite tasks as they arise. We are looking for an experienced engineer who shows initiative and demonstrates strong customer service and communication skills. The candidate will be self-directed, organized, and results-driven. In this role, the candidate will work as a primary technical resource for closing detection and reporting gaps that no single tool can solve on its own.\nWhat You'll Do:\nLead cross-tool security engineering efforts, advising on best practices for closing detection and reporting gaps that span multiple platforms\nDiagnose and resolve reporting and visibility gaps created when a tool in the environment is deprecated, replaced, or reconfigured - for example, reconstructing lost reporting coverage by combining endpoint telemetry with Splunk data\nDesign, implement, and document data flows and integration points across endpoint protection, SIEM, and other security tools supporting the program\nBuild and tune detection logic, correlation searches, and dashboards that hold up as individual tools in the stack change, are replaced, or are retired\nLead the technical transition work when a security tool is deprecated, replaced, or reconfigured, ensuring no loss of detection or reporting coverage\nIntegrate tools such as CrowdStrike, Splunk, Cribl, CyberArk, Suricata, Tenable, Tanium, Thales, CASB, Trellix, Axonius, and others to close cross-platform visibility gaps\nDevelop automation and correlation workflows using APIs across the security tool stack to reduce manual reporting and analysis work\nSupport threat hunting and incident response efforts that require correlating evidence across more than one tool or data source\nSupport endpoint and platform security compliance with NIST, FISMA, and agency-specific requirements\nMaintain current, accurate documentation of tool configurations, data flows, and integration architecture across the stack\nServe as the team's point of contact for cross-tool security engineering issues\nWhat You've Done:\nAbility to attain DHS EOD\nMaster's degree or equivalent, plus 12 years of relevant experience\nDemonstrated, hands-on experience across more than one security tool category (endpoint/EDR, SIEM, vulnerability management, network detection, or similar)\nHands-on experience with an EDR/endpoint platform (e.g., CrowdStrike Falcon) - administration, detection engineering, or response\nHands-on experience with Splunk (or an equivalent SIEM) - search, correlation searches, and dashboard/reporting development\nDemonstrated experience correlating and integrating data across disparate security platforms to close a visibility, detection, or reporting gap\nScripting/automation proficiency (Python, PowerShell, or similar) for cross-tool data pipelines and API integrations\nExperience owning a tool deprecation or migration without losing detection or reporting coverage\nEffective communicator at all levels, both written and verbal\nProfessional, customer-oriented, and even-keeled under pressure\nPreferred Qualifications:\nExperience supporting federal agency security operations centers \nAdditional security certifications (CISSP, GIAC, Security+) \nExperience with CrowdStrike's cloud workload protection capabilities \nKnowledge of CISA directives and CDM program requirements \nBackground in threat hunting and advanced persistent threat detection \nExperience with security orchestration and automation platforms \nFamiliarity with Zero Trust Architecture implementation \nWork Environment:\nHybrid work model with 3 day/week on-site presence near National Harbor, Maryland \nMust be able to pass a Federal background investigation - US Citizenship required\nParticipation in on-call rotation for security incident response \nWhat We Offer:\n401(k), including an employer match of 100% of the first 3% contributed and 50% of the next 2% contributed \nMedical, Dental, and Vision Insurance (available on the 1st day of the month following your first day of employment) \nGroup Term Life, Short-Term Disability, Long-Term Disability \nVoluntary Life, Hospital Indemnity, Accident, and/or Critical Illness \nParticipation in the Discretionary Time Off (DTO) Program \n11 Paid Holidays Annually","description_format":"text","description_chars":4915,"description_truncated":false,"requirements":{"experience_years_min":12,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"master","optional":false},"security_clearance":true,"languages":[]},"benefits":["Hybrid work","Vision insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Artificial Intelligence","Cybersecurity","Penetration Testing","Managed Security"],"lifecycle":[{"event":"open","at":"2026-08-03T17:57:25Z"},{"event":"close","at":"2026-10-13T18:49:47Z"},{"event":"reopen","at":"2026-10-17T01:03:25Z"}],"visa":[],"liveness":{"score":24,"band":"cold","label":"Long shot","p_open":1,"p_active":0.679,"p_room":0.36,"age_days":79,"expected_fill_days":48,"reasons":["conf:1","velocity","win:tail","crowd:"],"computed_at":"2026-10-22T06:10:10Z"},"pay":{"stated_usd_annual":150000,"is_top_pay":false},"html_url":"https://alion.io/job/ultraviolet-cyber-senior-security-engineer-crowdstrike","json_url":"https://alion.io/job/ultraviolet-cyber-senior-security-engineer-crowdstrike.json","meta":{"generated_at":"2026-10-23T00:55:12Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1526,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-24T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":716716},"rest":"https://alion.io/mcp/rest/get_company?id=716716"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fultraviolet-cyber-senior-security-engineer-crowdstrike"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fultraviolet-cyber-senior-security-engineer-crowdstrike"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fultraviolet-cyber-senior-security-engineer-crowdstrike"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ultraviolet-cyber-senior-security-engineer-crowdstrike\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fultraviolet-cyber-senior-security-engineer-crowdstrike"}]}