Tyto Athene is hiring a Cyber Capability Developer SME to support a 24/7/365 Enterprise Security Operations Center (ESOC). The mission of the ESOC is to defend the customer against cyber threats through proactive engagement, vigilant monitoring, and prompt response. You will support various SOC teams’ development and automation needs. Duties include but are not limited to custom development of applications, scripted integrations between systems and the administration of security orchestration and automated response systems. The Cyber Capability Developer SME will use modern development automation and management tools to work in both Linux and Windows environments, in legacy and cloud environments.

Responsibilities:

• Design, develop, deliver, and sustain new and existing cybersecurity technologies in support of the Enterprise Security Operations Center (ESOC) and other stakeholders.
• Create, modify, and document all enhancements efforts, to include system design documents, standard operating procedures, operations and maintenance manuals/procedures, software development plans, and related documentation.
• Program design, coding, testing, debugging, and documentation.
• Recommend and utilize the appropriate programming language for each component or workload based upon performance requirements, supportability, integration with existing components, maintainability, and other selection criteria deemed applicable.
• Review current systems and analyze business functions or processes to understand the needs for which applications are being designed.
• Recommend system capabilities and objectives for assigned projects.
• Conduct quality assurance reviews.
• Develop all components and services using industry best practices such as test-driven development, centralized source code management, code reviews, and automated testing.
• Utilize continuous integration / continuous deployment (CI/CD) workflows to the maximum extent possible for all published components.
• Produce DevOps best practice templates to enable rapid implementation of DevSecOps development workflows.
• Provide subject matter expertise during the review of potential technologies proposed for integration with the environment.
• Fully document development efforts using a combination of code comments, project issue tracking, change requests, and formal documentation
• Ensure that software deployments minimally impact production workloads running in production environments.
• Perform analysis and tests, as needed, to aid the design process and to document the end item business functionality and system performance requirements.
• Identify emerging technologies, alternatives, and standards implementations, such as machine learning (ML) and artificial intelligence (AI), to provide better support for developers and application stakeholders.

Required:

• Bachelor’s degree in Computer Science, Information Security, Cybersecurity, or a related field; OR Master’s degree in Cybersecurity, Information Security, or a related field can be beneficial and may enhance your qualifications.
• A minimum of eight (8) years of overall experience with six (6) or more in the cybersecurity field including Enterprise Security Operations Center (ESOC) watch teams, network monitoring, incident response, digital forensics, malware analysis, etc.
• Full technical knowledge of all phases of applications systems analysis and programming.
• Ability to manage large scale development efforts, including the technical lead of other development teams.
• Demonstrated experience with Git, GitLab, or GitHub and CI/CD pipelines.
• Agile software design experience and be able to create/consume stories within a sprint structure.
• Understanding of the design and development of complex server based, client/server, service oriented, micro-service, n-tiered, machine learning (ML) and/or artificial intelligence (AI) applications
• Understanding of containerization technologies and be capable of packing and deploying developed solutions using container based best practices
• Experience with scripting or programming languages (e.g., PowerShell, Python).
• Experience with both Windows and Linux operating systems and network.
• Hands-on experience with docker and containerized applications
• Experience with modern automation and management tools, including Ansible, Helm, Terraform, and Kubernetes.
• Experience with Splunk for threat detection, incident investigation, and security event correlation.

Desired:

• Advanced cybersecurity certification (CISSP, CISM, GCIH, GCIA, etc.)
• Experience working in AWS & Azure environments
• Experience with Microsoft Sentinel

Clearance:

• Active Top Secret with SCI eligibility

Location: Huntsville, AL (on-site)

Benefits:

• Highlights of our benefits include Health/Dental/Vision, 401(k) match, Flexible Time Off, STD/LTD/Life Insurance, Referral Bonuses, professional development reimbursement, and maternity/paternity leave