Security Development Team Developer

• Implement SIEM detection capabilities.
• Develop alerting for cloud-related malicious activity.
• Coordinate detection efforts between the Security Development Team, Malware Team, and Threat Integration Team.
• Develop and enhance threat dashboards and advanced analysis capabilities.
• Assist in integrating ticketing solution with detection and response events (SOAR).
• Onboard and integrate cyber monitoring tools from the analyst’s perspective.
• Write Microsoft Defender for Endpoint (MDE), Zeek (Bro) Suricata and Snort signatures, develop new content for cyber defense tools.
• Collaborate with endpoint and cloud signature analyst in writing Bespoke alerts.
• Collect and analyze intrusion artifacts (e.g., source code, malware, and system configuration) to improve threat detection.
• Provide Security Developer detections support in a 24x7x365 environment.

• Bachelor’s degree and 5 years of relevant experience; or a Master's degree and 3 years of experience. An additional 4 years of experience will be considered in lieu of degree.
• Must possess ONE of the following certifications:
  • CEH, CFR, CHFI, Cloud , CySA , GCFA, GCIA, GCIH, GICSP, SCYBER, CCNA Security
• Expertise in planning, implementation and usage of log aggregation and security analysis tools.
• Knowledge of Splunk, native event logs, and ability to identify remediation steps for cybersecurity events.
• Strong organizational skills.
• Proven ability to operate in a time sensitive environment.
• Proven ability to communicate orally and written.
• Proven ability to brief (technical/informational) senior leadership.
• Ability to scope and perform impact analysis on incidents.
• U.S. citizenship required.
• Must have a Secret security clearance to start.
  • Ability to obtain a Top Secret security clearance required.

Preferred Qualifications:

• Familiarity with monitoring Cross Domain Solutions.
• Familiarity with Databricks.
• Understanding of Machine Learning and User and Entity Behavior Analytics.
• Understanding of Cloud Development with Microsoft Azure/MDE.
• Understanding of SQL, Python and JavaScript.
• Understanding of Splunk ES and Splunk ES Cloud.
• Microsoft Certifications (SC-200, SC-300, SC-400, SC-900).
• Splunk Certifications (Using ES, Administering ES, Enterprise Data Administration, Core Certified User, Power Certified Use).

What We Can Offer You:

• At SkyePoint, we go B.I.G. (beginning in GRATITUDE) by recognizing all we have and giving back to our employees, families, and communities. It instills a positive mindset that permeates all we do. By beginning in gratitude, SkyePoint can continue to spread living in gratitude each day.
• Great Benefits: Several insurance options including HMO and High Deductible plans with Health Savings Accounts [HSAs], Flex Spending Accounts [FSAs], Full Dental Plans, ST/LT Disability, Life Insurance, floating federal holiday options, and 401k matched
• Certificate Incentive Program: To promote professional development, we recognize and reward employees who obtain new certifications aligned with business needs.
• Flexible Work Environment

SkyePoint Decisions is an established ISO 9001:2015 and ISO/IEC 27001:2013 certified small business and appraised at CMMI Level 3 for Services and Development. We possess a common vision of excellence and foster a collaborative team culture built upon individual performance and accountability. We invest in our people and systems to create value for our clients. It is the SkyePoint Way. We are grateful for the opportunity to work with exceptional people and give back to the communities we serve. Our employees value the flexibility at SkyePoint that allows them to balance quality work and their personal lives.

Please be aware of recruiting scams and people claiming to be from SkyePoint Decisions. For more information, please see the Welcome Page of our Careers site.

Skyepoint Decisions is a participating E-Verify Employer.

U.S. Citizenship is required for most positions.

Equal Opportunity Employer/Veterans/Disabled.