Security & Development Developer

SkyePoint Decisions is a leading Cybersecurity Architecture and Engineering, Critical Infrastructure and Operations, and Applications Development and Maintenance IT service provider headquartered in Dulles, Virginia with operations across the U.S. We provide innovative enterprise-wide solutions as well as targeted services addressing the complex challenges faced by our federal government clients. Our focus is on enabling our clients to deliver their mission most efficiently and effectively - anytime, anywhere, securely.

We combine technical expertise, mission awareness, and an empowered workforce to produce meaningful results.

SkyePoint Decisions is seeking a Security & Development Developer to support the Diplomatic Security Cyber Mission (DSCM) program providing leading cyber and technology security experience to enable innovative, effective, and secure business processes.

• Perform advanced custom development and implementation of cybersecurity alerts
• Develop, configure, and tune cyber security tools, alerts, and response capabilities
• Integrate security alerts and process workflows into SOAR and SIEM systems
• Automate and optimize security alert workflows to enhance threat response capabilities and enhance efficiency throughout the Incident Response lifecycle
• Analyze systems and environments to determine necessary logging and alerting to optimize cyber security monitoring in an ever‑changing cyber threat landscape
• Provide technical expertise for Splunk, Python, JavaScript, Power Shell, and similar coding languages
• Support the security operations center through security development
• Support cross team collaboration efforts to enhance the customer's defense against advanced cyber adversaries
• Implement cyber monitoring, analysis, and response capabilities within our SIEM, SOAR, and detection tools
• Develop and enhance threat detections and advanced analysis capabilities
• Provide tuning of threat detections
• Onboard and integrate cyber monitoring tools from the analyst's perspective
• Coordinate with engineers to assist in building and maintaining platforms
• Coordinate with cyber threat experts to implement the latest signatures
• Create and maintain various security dashboards, alerts, and reports
• Write Zeek (Bro), Suricata, and Snort signatures
• Maintain Python and JavaScript based detections and automation capabilities within our tools

• Bachelor's degree and minimum of 9 years with bachelor's degree; four (4) additional years of experience can be substituted in lieu of the degree requirement; 7 years with Masters; 4 years with PhD.
• To be considered for this position, applicants must either currently hold one of the professional certifications listed below or obtain one prior to their start date. Continued certification is required as a condition of employment:
  • CASP+ CE, CCNA Cyber Ops, CCNA‑Security, CCNP Security, CEH, CFR, CISA, CISSP (or Associate), Cloud+, CySA+, GCED, GCIA, GCIH, GICSP, SCYBER, VCA DCV, PPDA, Agile IC, SNOW App Dev
• U.S. citizenship required.
• Active Secret security clearance.
  • Ability to obtain final Top Secret clearance.

• A solid understanding of the MITRE ATT&CK Framework
• A solid understanding of Splunk Enterprise Security
• A solid understanding of Cybersecurity Incident Response
• A solid understanding of Cloud Development with Microsoft Azure/MDE.
• A solid understanding of Machine Learning and User and Entity Behavior Analytics.

Salary Range: $120,000-$136,000

The SkyePoint Decisions salary range for this position is a general guideline only. It represents an estimated range for this position and is just one piece of our total compensation package.

Salary at SkyePoint is determined by various factors, including but not limited to location, work schedule, the candidate's combination of education, knowledge, skills, competencies, and experience, as well as contract‑specific affordability, market data and business considerations.

In addition to a competitive salary, SkyePoint offers…