Cybersecurity Operations

Cybersecurity Operations Developer Jobs

2 jobs found

Today

Security Data Engineer

Deloitte Colorado Springs, CO

Colorado Springs, CO

Today

$96k - $159k/yr Full time Cybersecurity Operations Data Data Analysis

Apply Now

Job Description

Join Deloitte’s Enterprise Security team in Colorado Springs to help clients design, implement, and improve enterprise security solutions.

Responsibilities

Design, write, and deploy high-fidelity detection rules using SQL, Sigma, YARA-L, or Python for network-based attack techniques (including C2 beaconing, data exfiltration, and lateral movement).
Continuously tune network detections to reduce false positives while keeping strong signal-to-noise.
Determine the telemetry needed for network monitoring, threat hunting, incident response, and custom detection engineering.
Translate detection needs into data-source requirements and identify visibility gaps across hybrid cloud and on-premises environments.
Design and maintain ingestion pipelines for security telemetry from network, endpoint, identity, cloud, application, OT, and security infrastructure.
Ensure reliable delivery of telemetry to SIEM, data lake, analytics, and detection platforms; troubleshoot ingestion, parsing, latency, and data-quality issues.
Validate whether telemetry types (packet, flow, session, DNS, proxy, authentication, endpoint, application) are sufficient for specific detection requirements.
Support custom detection engineering through data discovery, enrichment, normalization, and validation.
Use the Detection Stack to identify opportunities to elevate detections from low-level indicators to higher-level behavioral and tradecraft-based detection.
Collaborate with network engineering teams to evaluate telemetry and detection-related technologies, including network sensors, NetFlow/IPFIX, DNS telemetry, proxy telemetry, firewall logs, IDS/IPS, packet capture, Zeek (network metadata), and NDR platforms.
Establish telemetry health metrics, dashboards, and automated checks for missing, delayed, or malformed data.
Assess network visibility across data centers, cloud environments, remote networks, and segmented environments.
Optimize telemetry architectures and ingestion pipelines for performance, scalability, reliability, and cost.

Requirements

Bachelor’s degree in Cybersecurity or Information Technology.
Active TS/SCI or SCI eligibility.
4+ years of experience in cybersecurity, enterprise security, or information security.
3+ years supporting the implementation or administration of security technologies across enterprise environments.
3+ years producing technical documentation, status reporting, or client deliverables for security engagements.

Technologies

SQL
Sigma
YARA-L
Python
SIEM
Detection Stack
NetFlow/IPFIX
IDS/IPS
Zeek
NDR
Packet capture

Benefits

Eligible for a benefits package that is competitive for project delivery-focused professionals.
May be eligible to participate in a discretionary annual incentive program, subject to program rules.

Preferred

Master’s degree in Cybersecurity, Information Technology, Information Systems, Engineering or related field with 10+ years of related experience.
Experience supporting government or public sector clients.
Experience with cloud security, data security, and network security.

Location: Colorado Springs, CO (onsite)

Salary: USD 95,600 - 159,300 per year

View full job page →

Today

Expert CNO Developer

MANTECH Hanover, MD

Hanover, MD

Today

Full time Backend Developer Manager Cno

Apply Now

Job Description

MANTECH is hiring an Expert CNO Developer to support development of mission-critical cyber capabilities and advanced Computer Network Operations (CNO) in Hanover, MD (onsite). In this role, you will help drive technical excellence across CNO development and engineering activities while contributing to practical test and lab execution.

What you will do

Design, write, and execute software test plans
Write automation and utility scripts using Python, Perl, VB script, or Unix shell scripts
Install and configure network security devices, including firewalls and network Intrusion Detection Systems (IDS)
Lead engineering teams while evaluating CNO solutions
Replicate real-world network and system scenarios in a lab environment

Required qualifications

Education and experience alignment:
- BS degree in a technical discipline and 12+ years of technical work experience
- or MS degree in a technical discipline and 10+ years of technical work experience
- or High school diploma and 16+ years of technical work experience
Experience with Python and C/C++
Experience troubleshooting and debugging complex systems
Experience with low-level system internals across one or more platforms (such as Windows, Unix, Mobile, or network devices)
Experience with networking protocols (TCP/IP) and socket-level programming
Experience developing CNO capabilities
Clearance: Must have a current/active TS/SCI with Polygraph security clearance and be willing and able to obtain another polygraph prior to start, if required
Physical requirement: Must be able to remain in a stationary position at least 50% of the time

Technologies

Python, Perl, VB script, Unix shell scripts
C/C++
TCP/IP and socket-level programming
Firewalls and network Intrusion Detection Systems (IDS)

Preferred qualifications

Experience with Ansible
Experience with ELK/Splunk
Experience with NiFi
Experience with VMware
Experience with traffic generation tools
Experience with networking device system commands

View full job page →

Cybersecurity Operations Developer Jobs

Security Data Engineer

Expert CNO Developer

Get Cybersecurity Operations Developer Jobs alerts