ICF International seeks an experienced Senior Software Developer to support the research and development of new cyber analytic capabilities that will help the US protect and defend its networks and critical information systems. The successful candidate will support a large federal cyber security analytic program--contributing to the knowledge of how cyber-attacks work, how vulnerabilities are exploited, and how hostile cyber actors operate. The successful candidate will analyze/understand data to identify anomalies and assist with prototyping future cyber capabilities for implementation at large-scale. The Senior Software Developer will work with customers, SMEs and researchers to evolve, automate, and enhance cybersecurity capabilities, provide software engineering development and support. The SW Developer will also provide some personnel oversight. This is a one-of-a-kind opportunity to join an important project from its inception. If selected, you'll work with the latest and emerging tech, while building a great career at ICF! This role is primarily telework-based, with occasional meetings at client locations (Arlington, VA or Pensacola, FL) or ICF facilities within the National Capital Region. What You Will Be Doing: Work closely with cyber personnel to understand manual analytic processes that are used to assist in the automation of those processes
Create automated analytic capability sets (e.g., signature, behavioral, heuristic, anomalous, unsupervised-learning, predictive, and emerging)
Develop new platforms to elicit operational effect
Support the design, development, and deployment of production systems adhering to the Continuous Integration/Continuous Delivery (CI/CD) pipeline
Provide post-deployment support of continuous analysis through the full lifecycle of the capabilities
Perform functions associated with the analysis of information--refining analytics and countermeasure selection, reviewing output, and making upgrades/improvements to the performance of the analytics and countermeasures.
What You Must Have: Bachelor’s degree with 12 years of experience in software development OR master’s degree with 10 years of experience in software development
3years of Python development experience
3 years of development experience in AWS serverless architecture
1 year of experience in federal cybersecurity requirements
1 year of experience in analytics (e.g., file, network, host-based, etc.).
U.S. Citizenship required (required by federal government for position). Security clearance required. Preferred Qualifications: Interpersonal skills and the ability to communicate effectively with various clients in order to explain and elaborate on technical details
Experience within some or all of these capability areas: Intrusion Detection, Analytics, Information Sharing, Intrusion Prevention, Core Infrastructure
Experience with developing applications running on Big Data platforms such as Hadoop/Cloudera or Spark
Experience with shell scripting using Bash, PowerShell, or equivalent
Experience with network monitoring tools such as Wireshark, tcpdump, Zeek, SiLK, or YAF
Experience within Cloud environments in or using technologies provided by AWS, Google, or Azure
Experience with Linux operating system
Experience with monitoring/diagnosing activity at the host, application, network, Internet protocol, database, source code, and LAN layers or other areas preferred
Experience in analytics associated with analyzing databases, source code, hosts, middleware, application, Local Area Network (LAN), and Internet networks across Open System Interconnect (OSI) model
Experience in developing real- or near real-time automation
Scaled Agile Framework (SAFe) experience
AWS certification (Developer, DevOps, and/or Application Architect, etc.)
CompTIA Advanced Security Practitioner (CASP ) or higher certification level preferred