UltraViolet Cyber
UltraViolet Cyber
UltraViolet Cyber brings offensive and defensive security work together through a Security-as-Code platform that continuously monitors an organization’s attack surface. Its cybersecurity services include Managed Detection & Response, SOC as a Service, Continuous Penetration Testing, and Continuous Threat Exposure Management. The company focuses on helping organizations strengthen cyber readiness and resilience by coordinating threat detection, testing, and response.

Senior Cloud Security and Compliance Engineer

Administer Wiz and automate FedRAMP and NIST controls across AWS, Azure, and Google Cloud. Build policy-as-code and Terraform security capabilities for UltraViolet Cyber’s unified security operations platform.

Aprašymas

  • Manage Wiz as the primary technical administrator
  • Create custom policies as code
  • Automate FedRAMP and NIST SP 800-53 controls across multiple cloud platforms
  • Improve cloud security with practical, scalable policy engineering
  • Reduce false positives and sharpen detection to improve finding quality
  • Create reusable Terraform modules and secure-by-default infrastructure patterns
  • Help engineering teams address risk efficiently through automation and clear guidance
  • Support regulated cloud environments with effective technical controls and continuous monitoring
  • Develop scalable security capabilities across AWS, Azure, and Google Cloud
  • Improve the organization’s ability to identify, assess, and resolve cloud security risks
  • Use Python and Terraform in daily work

Reikalavimai

  • U.S. citizenship is required
  • At least five years of hands-on cloud security engineering experience
  • Production experience administering Wiz or a comparable CNAPP platform, including custom rules or cloud configuration rules, policies, and integrations
  • Proficiency in Python scripting, automation, and API integrations, such as the Wiz GraphQL API or boto3
  • Deep AWS experience and strong experience with either Azure or Google Cloud, plus working knowledge of all three platforms
  • Experience building reusable, secure-by-default Terraform/HCL modules
  • Experience with OPA/Rego or a comparable policy-as-code framework
  • Ability to assess exploitability and blast radius, prioritize risks, and tune false positives
  • Experience with NIST SP 800-53, FedRAMP, GovCloud, or Impact Level environments, including mapping controls to technical guardrails, is preferred
  • Experience with Kubernetes manifests and container security is preferred
  • Experience integrating security controls into CI/CD platforms such as GitHub Actions, GitLab, or Jenkins is preferred
  • Experience supporting audits and continuous monitoring (ConMon) is preferred
  • Experience mentoring engineers and leading technical discussions is preferred
  • Relevant security certifications are preferred, such as AWS Certified Security – Specialty, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Professional Cloud Security Engineer, or CCSP
  • Candidates must meet applicable U.S. regulatory requirements for work in FedRAMP environments

Susiję darbai

Vitality Group Inc.

Product Designer, Remote (Illinois)

Vitality Group Inc.

Design accessible digital wellness experiences for Vitality members, guiding work from research and prototyping through usability testing. Build scalable design systems in Figma and explore AI-assisted workflows.

Atidaryti
PHLY

Senior PIP Claims Examiner

PHLY

Evaluate coverage, reserves, and settlements for PIP claims at Philadelphia Insurance Companies. Investigate claims and coordinate with claimants, customers, mediators, and legal parties.

Atidaryti