UltraViolet Cyber

• Lead end-to-end semi-monthly and monthly payroll processing for 350+ employees and contractors across multiple EINs in the U.S. and Canada (NAM). • Oversee payroll operations in India (APAC) for 400+ employees, partnering with regional teams to ensure consistency, compliance, and cross-border alignment. • Ensure full compliance with federal, state, and local tax laws; including timely tax filings, withholdings, and multi-state registrations. • Reconcile payroll liabilities (taxes, benefits, garnishments) in close partnership with HR and Finance. • Collaborate with HR and Finance to reconcile journal entries, ensuring accurate labor expense classification across entities. • Maintain timely updates to compensation, deductions, and benefits in partnership with HR. • Manage HSA contribution uploads, ensuring accurate and timely funding in coordination with benefits and banking partners. • Oversee UK pension import processes, ensuring compliance with auto-enrolment requirements and accurate submission to pension providers. • Champion data integrity and security across all payroll systems and employee records. • Serve as the escalation point for employee payroll inquiries; responsive, clear, and professional. • Coordinate with Accounting to post labor costs from timesheet systems into the ERP and appropriate cost centers. • Work with Accounting to segment payroll across direct and indirect cost pools; project-based costs, fringe, overhead, and G&A. • Collaborate with FP&A and Project Accounting on labor forecasting and headcount budget planning. • Prepare payroll-related metrics, management reports, and audit-ready documentation. • Drive payroll system automation, improvements, and migration projects; ensuring data accuracy and continuity throughout. • Enforce payroll-related GL coding and segmentation policies across departments. • Maintain rigorous documentation and internal controls around payroll processes and approvals. • Lead payroll components of internal and external audits; identify gaps and implement corrective actions. • Ensure accurate and timely filings for federal and state wage and tax reports (W-2, 941, etc.). • Coordinate with external accountants and tax advisors on payroll compliance and filing obligations. • Maintain state payroll registrations and ongoing reporting requirements across all applicable jurisdictions.

• Own all sales & financial analytics, reporting and regularly partner with leadership, Achieve Partners and debt provider to ensure financial reporting is accurate and timely and all operating decisions are grounded in financial rigor

• Lead and participate in full-lifecycle red team engagements: scoping, planning, execution, and reporting • Simulate advanced persistent threat (APT) tactics against enterprise network and cloud environments • Execute multi-stage attack chains spanning network compromise, Active Directory abuse, cloud environments, and data exfiltration • Design and conduct social engineering campaigns including phishing, vishing, and smishing operations • Conduct adversary simulation against hybrid and cloud-native environments (AWS, Azure, GCP) • Develop custom tooling, payloads, and tradecraft to evade modern defensive controls (EDR, SIEM, CASB) • Produce high-quality, actionable reports tailored to both technical and executive audiences • Collaborate with blue team and MDR teams to deliver purple team assessments • Mentor junior consultants and contribute to internal capability development • Stay current with emerging threat actor TTPs, tooling, and industry research

Role Description The Cloud Governance & Compliance Advisor will lead the assessment of cybersecurity governance frameworks, policies, and compliance programs to determine alignment with regulatory requirements and industry best practices. - Review and evaluate cybersecurity governance frameworks, policies, standards, and procedures - Assess compliance with regulatory and industry standards such as: - GDPR, HIPAA, SOC 2 - NIST Cybersecurity Framework (CSF) - NIST SP 800-53 - ISO/IEC 27001 - Cloud Security Alliance (CSA) Cloud Controls Matrix - Apply maturity models (e.g., NIST CSF, CMMI) to establish a current-state baseline - Conduct interviews with compliance stakeholders and business leaders - Perform detailed document reviews (policies, procedures, audit reports) - Evaluate AWS governance processes and controls in regulated environments - Identify gaps in governance, risk management, and compliance capabilities - Develop actionable recommendations to improve governance structure and compliance posture Qualifications - 8+ years of experience in cybersecurity governance, risk, and compliance assessments - Expertise in regulatory frameworks and audit/assessment processes - Deep expertise in NIST, ISO, CSA CCM, and federal compliance frameworks Requirements - CISSP – broad coverage across governance, risk, and controls - CISM (Certified Information Security Manager) – governance and program oversight focus - CRISC (Certified in Risk and Information Systems Control) – risk management emphasis - CISA (Certified Information Systems Auditor) - ISO/IEC 27001 Lead Implementer or Lead Auditor - CCSK (Certificate of Cloud Security Knowledge) - Active TS/SCI with SCI Polygraph (or eligible) Benefits - $110,000 - $160,000 a year - 401(k), including an employer match of 100% of the first 3% contributed and 50% of the next 2% contributed - Medical, Dental, and Vision Insurance (available on the 1st day of the month following your first day of employment) - Group Term Life, Short-Term Disability, Long-Term Disability - Voluntary Life, Hospital Indemnity, Accident, and/or Critical Illness - Participation in the Discretionary Time Off (DTO) Program - 11 Paid Holidays Annually

• Own end-to-end sales motions: prospecting, qualification, scoping, proposal development, negotiation, and close. • Build and execute a territory plan that expands new logo acquisition and grows revenue across existing enterprise accounts. • Position the full suite of offensive security services—pen testing, red teaming, cloud security testing, and managed offensive capabilities. • Maintain a strong pipeline with 3x+ quota coverage and predictable forecasting. • Lead consultative discussions with CISOs, engineering leaders, AppSec teams, and procurement stakeholders. • Partner with technical SMEs and consulting leads to shape solutions aligned to client risk, maturity, and regulatory requirements. • Establish multi-threaded relationships within accounts to improve deal velocity and renewal rates. • Deliver compelling client presentations, statements of work, and value-based proposals. • Work closely with the consulting delivery team to scope engagements accurately and ensure high customer satisfaction. • Align with marketing on targeted campaigns, regional events, and ABM programs. • Achieve or exceed quarterly and annual bookings targets. • Maintain accuracy of CRM data, forecasting, and pipeline metrics. • Drive healthy mix of services revenue: net-new logos, expansion, and multi-project programs.

• Measure compliance with OMB Memorandum M-26-14 once the logging reference architecture (LRA is released) and provide recommendations for improvement. • Assess and monitor security data feeds and improve coverage of key security data sources. • Provide subject-matter expertise to support log monitoring and normalization. • Create and update reports and alerts to assess data quality and compliance with security requirements. • Collaborate with SOC, IT, and application teams to identify and address issues. • Provide regular reports to senior management and data owners on the status of monitoring and M-26-14 implementation. • Write documentation and standard operating procedures (SOPs) for custom data sources and application configurations.

• Own end-to-end sales motions: prospecting, qualification, scoping, proposal development, negotiation, and close. • Build and execute a territory plan that expands new logo acquisition and grows revenue across existing enterprise accounts. • Position the full suite of offensive security services—pen testing, red teaming, cloud security testing, and managed offensive capabilities. • Maintain a strong pipeline with 3x+ quota coverage and predictable forecasting. • Lead consultative discussions with CISOs, engineering leaders, AppSec teams, and procurement stakeholders. • Partner with technical SMEs and consulting leads to shape solutions aligned to client risk, maturity, and regulatory requirements. • Establish multi-threaded relationships within accounts to improve deal velocity and renewal rates. • Deliver compelling client presentations, statements of work, and value-based proposals. • Work closely with the consulting delivery team to scope engagements accurately and ensure high customer satisfaction. • Align with marketing on targeted campaigns, regional events, and ABM programs. • Provide field intelligence and competitive insights back to product, delivery, and leadership teams. • Achieve or exceed quarterly and annual bookings targets. • Maintain accuracy of CRM data, forecasting, and pipeline metrics. • Drive healthy mix of services revenue: net-new logos, expansion, and multi-project programs.

Role Description UltraViolet Cyber is seeking an Associate Cyber Threat Researcher (Level I) to join our Threat Intelligence & Detection Engineering (TIDE) team. Your primary responsibilities will include: - Engaging in threat hunts to identify, investigate, and respond to cyber threats in our customer environments. - Creating intelligence-based threat detections to defend our customers against modern cyber threats. - Leveraging knowledge of the cyber threat landscape to support offensive and defensive threat intelligence objectives. - Utilizing deep technical expertise, advanced analytic skillsets, and knowledge of adversarial tactics, techniques, and procedures (TTPs). - Engaging with internal account teams and customers to strengthen their security posture, identify weaknesses, report findings, and detection strategies. Qualifications - U.S. citizenship is required. - At least 1-3 years of experience in cybersecurity, with at least 1 year focused on threat hunting or detection engineering. - History of building custom behavior-based and/or threshold-based detections in customer environments from scratch. - Capable of identifying and tuning flaws in existing detections to reduce noise with little to no oversight. - Experience performing hypothesis-driven threat hunts in customer environments. - Capable of clearly and concisely reporting findings from threat hunts. - History of attending customer meetings, including those involving senior leadership. - Working understanding of the MITRE ATT&CK framework. - Background knowledge in the cyber threat landscape, including threat actors, malware, and evolving TTPs. - Experience working with cyber threat intelligence analysts/teams to identify new detection opportunities. - Proficiency with SIEMs, EDR/XDR platforms, and log analysis tools. - Experience with scripting languages (Python, PowerShell, etc.) for scripting purposes. - Enjoy working in a team environment. - Willingness to learn from more senior team members while mentoring junior team members. Requirements - Experience building detections in SentinelOne, Elastic, and/or CrowdStrike platforms preferred. - Prior experience as part of, or directly supporting, a Threat Intelligence team. - GIAC Threat Hunting (GCTH), Certified Enterprise Defender (GCED), or Certified Intrusion Analyst (GCIA) certification(s). Benefits - 401(k), including an employer match of 100% of the first 3% contributed and 50% of the next 2% contributed. - Medical, Dental, and Vision Insurance (available on the 1st day of the month following your first day of employment). - Group Term Life, Short-Term Disability, Long-Term Disability. - Voluntary Life, Hospital Indemnity, Accident, and/or Critical Illness. - Participation in the Discretionary Time Off (DTO) Program. - 11 Paid Holidays Annually. - $50,000 - $90,000 a year.

• Collaborate with multiple teams to build and enhance complex software and security tooling that interacts with multiple systems, processes, and standards • Help improve the availability, performance, scalability, and security of Adobe's security tools. • Provide security analysis before and at build time across Adobe’s security tooling • Keep elevated levels of Security and Compliance with the Adobe Standards, including engaging with Adobe product teams on their cloud deployment practices • Enhance our development workflow to follow industry best practices by assisting in development of standards and leveraging automation • Improve our development pipelines so that we can achieve faster and more reliable deploys • Focus on DevSecOps tooling and strategy

• Business Development: Identify, prospect, and qualify new opportunities within federal, civilian, or DoD agencies to build a robust sales pipeline.**• Proposal Support: Assist our proposal team in constructing industry leading proposals to meet government requirements.**• Relationship Management: Build trust with government buyers, procurement officers, and key stakeholders, often navigating complex, multi-level organizations.**• Compliance & Contracting: Understand federal acquisition regulations, procurement processes, and contract vehicles (e.g., GSA schedules, IDIQs).**• Research & Target Identification: Using CRM and research tools (e.g., Salesforce, GovWin) to identify key stakeholders, decision-makers, and influencers within government agencies.**• Strategic Selling: Develop and conduct product demonstrations and leverage partner ecosystems to expand market share.**• Market Intelligence: Monitor government funding cycles, industry trends, and competitor activities to refine sales strategies.**• CRM Management: Maintaining accurate records of interactions, activities, and contact information in Salesforce.