SkyePoint Decisions is seeking a Security Development Team Developer to support the Diplomatic Security Cyber Mission (DSCM) program providing leading cyber and technology security experience to enable innovative, effective, and secure business processes.
Requirements
- Expertise in planning, implementation and usage of log aggregation and security analysis tools.
- Knowledge of Splunk, native event logs, and ability to identify remediation steps for cybersecurity events.
- Familiarity with monitoring Cross Domain Solutions.
- Familiarity with Databricks.
- Understanding of Machine Learning and User and Entity Behavior Analytics.
- Understanding of Cloud Development with Microsoft Azure/MDE.
- Understanding of SQL, Python and JavaScript.
Responsibilities
- Implement SIEM detection capabilities.
- Develop alerting for cloud-related malicious activity.
- Coordinate detection efforts between the Security Development Team, Malware Team, and Threat Integration Team.
- Develop and enhance threat dashboards and advanced analysis capabilities.
- Assist in integrating ticketing solution with detection and response events (SOAR).
- Onboard and integrate cyber monitoring tools from the analyst’s perspective.
- Write Microsoft Defender for Endpoint (MDE), Zeek (Bro) Suricata and Snort signatures, develop new content for cyber defense tools.
Other
- Bachelor’s degree and 5 years of relevant experience; or a Master's degree and 3 years of experience.
- Must possess ONE of the following certifications: CEH, CFR, CHFI, Cloud+, CySA+, GCFA, GCIA, GCIH, GICSP, SCYBER, CCNA Security
- U.S. citizenship required.
- Must have a Secret security clearance to start.
- Ability to obtain a Top Secret security clearance required.
