Software Developer, Cybersecurity, Systems Engineer

Onsite (Must live in Austin TX area)

Level Description

8 or more years of experience, relies on experience and judgment to plan and accomplish goals, independently performs a variety of complicated tasks, may lead and direct the work of others, a wide degree of creativity and latitude is expected.

Researching, designing, implementing and managing software programs. Testing and evaluating new programs. Working closely with other developers, UX designers, business and systems analysts.

(
Cybersecurity Engineering – Penetration Testing & SIEM Integration
)

The Software Developer III will serve within the HHSC Chief Information Security Office (CISO) to design, develop, and support cybersecurity engineering solutions that enhance penetration testing capabilities, security automation, and Security Information and Event Management (SIEM) integrations.

This role will focus on building secure APIs, automation scripts, and tool integrations that enable scalable security testing, continuous monitoring, and data-driven threat detection across HHSC environments.

The position requires strong software development expertise combined with hands‑on cybersecurity engineering skills, including Kali Linux server deployment, penetration testing toolchain support, SIEM data ingestion, and security automation scripting.

This role directly supports HHSC’s Zero Trust, continuous monitoring, and security operations modernization initiatives.

• Design and develop secure software components, APIs, and microservices to support penetration testing workflows and security automation.
• Build custom integrations between penetration testing platforms, vulnerability scanning tools, and enterprise SIEM platforms.
• Develop data ingestion pipelines to normalize and forward security telemetry into Splunk and other SIEM platforms.
• Create automation scripts to orchestrate security testing, evidence collection, and reporting processes.
• Support integration of security testing results into governance, risk, and compliance (GRC) platforms.

• Build and maintain Kali Linux-based penetration testing infrastructure, including virtualized and cloud-hosted environments.
• Configure and manage penetration testing tool chains, frameworks, and supporting services.
• Develop custom exploit scripts, test harnesses, and proof‑of‑concept code to validate security findings.
• Support red team and application penetration testing engagements through automation and tool development.

• Develop APIs and connectors to integrate security tools with enterprise SIEM platforms.
• Implement log parsing, enrichment, and normalization logic to improve detection fidelity.
• Automate alert enrichment, correlation, and reporting workflows.
• Collaborate with CSOC teams to align development efforts with detection and monitoring requirements.

• Develop scripts using Python, Power Shell, Bash, or similar languages to automate security operations and testing processes.
• Implement CI/CD pipelines for security tooling and integration code.
• Maintain version control repositories and documentation for developed solutions.

• Ensure developed solutions comply with HHSC security standards, DIR security control requirements, and NIST-based frameworks.
• Participate in architecture reviews, risk assessments, and technical design sessions.
• Produce technical documentation, configuration guides, and operational runbooks.

• 8 years required: advanced experience building security automation and platform integrations.
• 8 years required: hands‑on experience with penetration testing tools and Kali Linux environments.
• 3 years preferred: proficiency in one or more programming languages (Python, Java, JavaScript, or C#).
• 3 years preferred: experience developing REST APIs and integrating enterprise platforms.
• 3 years preferred: experience developing security data pipelines and SIEM integrations.
• 3 years preferred: ability to design scalable and resilient security…