Apply on Employer Site

Metrea · 5 hours ago

Security Developer

Washington, DC

Full-time

Hybrid

Mid Level

$100K/yr - $125K/yr

3+ years exp

Metrea is seeking a results-oriented Security Developer with a strong understanding of M365 technical and security capabilities, ideally with aerospace industry experience. The role focuses on cybersecurity analytics development, risk assessment, and enhancing security measures within the organization.

AerospaceBusiness IntelligenceCommercialInformation TechnologyMilitarySecurityTrainingTransportation

Responsibilities

Work closely with the security and operations team to development and enhancement cybersecurity needs to the overall infrastructure

Developing analytics and metrics to support incident and response protocols

Conduct threat modeling and support the risk and vulnerability assessment of the Metrea information system

Analyze the security of new or existing software applications across the enterprise

Review, test and improve existing cybersecurity baselines and configurations on M365 Intune

Develop automation scripts to support threat hunting and alerts generation on M365 Sentinel

Generate and review security reports for senior management

Support the evaluation and improvement of cybersecurity policies and procedures

Capable of identifying, prioritizing, strategizing and mitigating risks associated across the enterprise

Staying current with emerging security threats, technologies and trends to develop and implement cybersecurity awareness programs, promoting a culture of security within Metrea

Qualification

M365 technicalSecurity stackSoftware securityRisk assessmentM365 SentinelM365 IntuneCybersecurity analytics developmentThreat modelingAutomation scripts developmentQuery-based language (KQL)Cryptographic algorithmsDevSecOps principlesTechnical specifications creationAnalytical skillsMS Office suiteInterpersonal skills

Required

Bachelor's Degree

3+ years of experience in security development

3+ years of experience in software security and risk assessment

3+ years of experience with M365 Sentinel

3+ years of experience with M365 Intune

3+ years of experience with M365 Security stack

Deep understanding of the M365 technical and security capabilities

Strong technical background in cybersecurity analytics development

Good understanding of general cybersecurity events and tables

Ability to interact with all levels of personnel

Self-motivated; team oriented; responsible, and reliable

Positive attitude and proactive style

Knowledge of various coding techniques and best practices to mitigate vulnerabilities

Proficiency in the best practices of secure coding and architecture

Expertise in M365 technical and security stack and supporting the development of automating security tasks

Good understanding of cryptographic algorithms and implementation of encryption, signatures and PKI

Ability to design and architect DevSecOps principles and integrate security practices to existing workflows

Capable of conducting and supporting tabletop blue/red team exercises

Experienced in query-based language for the development of customized alerts and incidents identification within Metrea's SIEM (KQL preferred)

Experienced in MDM configuration and profile development (M365 Intune preferred)

Ability to analytically and systematically breakdown complex problems and develop solutions

Capable of communicating and conveying technical information to a broad audience

Promote a collaborative environment to foster teamwork and team building

Keeping current and actively conduct cybersecurity threats and vulnerabilities assessment

Ability to create technical specifications and documentation

Strong analytical skills

Good grasp of systems from 'big picture' integration perspective

Expertise in MS Office suite

Ability to manage multiple tasks with attention to detail and accuracy

Must be organized, focused and able to deliver under tight timelines

Excellent interpersonal, written, and verbal communications skills, with the ability to interact with various levels of personnel, including end users, management, and developers