Jobs via Dice ยท 5 hours ago
Onsite Software Developer 2 (Microsoft Sentinel SOAR, UEBA, SIEM)
Austin, TX
Full-time
Onsite
Entry, Mid Level
2+ years expDice is the leading career destination for tech experts at every stage of their careers. Our client, TexcelVision Inc., is seeking an Onsite Software Developer 2 to design, develop, and implement automation playbooks and analytics content for Microsoft Sentinel. The role involves collaborating with cybersecurity teams and integrating third-party systems to enhance security operations.
Computer Software
Responsibilities
Designs, develops, tests, and deploys Sentinel SOAR automation playbooks using Azure Logic Apps, Azure Functions, ARM templates, and REST APIs
Creates automated workflows for alert enrichment, triage, response actions, notification processes, and case management
Integrates Sentinel with third-party systems (EDR, IAM, ticketing systems, email gateways, firewalls, etc.) to automate security operations
Develops custom UEBA detection rules, anomaly models, ML-based behavior patterns, and advanced hunting queries (KQL)
Builds and maintains analytics content, data parsers, normalization rules, and entity behavior profiles
Evaluates behavioral anomalies and collaborates with cybersecurity teams to fine-tune detection logic
Designs and implements custom data connectors, ingestion pipelines, and data transformation logic
Creates dashboards, workbooks, hunting queries, and detection-as-code assets
Performs platform tuning to improve performance, reduce noise, and align to MITRE ATT&CK and Zero Trust principles
Develops supporting code modules, scripts, microservices, and helper APIs using Python, PowerShell, .NET, or similar languages
Works with DevOps pipelines, CI/CD processes, version control, and infrastructure-as-code where applicable
Writes technical design documents, SOPs, architecture diagrams, and automation runbooks
Collaborates with DSHS, HHSC CISO Office, and cross-functional stakeholders on requirements, testing, and deployment
Provides Tier III support for Sentinel engineering issues and participates in after-action reviews when needed
Qualification
Required
Graduation from an accredited four-year college or university with major coursework in computer science, computer information systems, software engineering, cybersecurity, or a related field
Two (2) years of full-time experience in software development, cloud engineering, SIEM engineering, or cybersecurity engineering
Two (2) years of full-time experience in software development, cloud engineering, SIEM engineering, or cybersecurity engineering
Preferred
Three (3) or more years of hands-on technical experience with Microsoft Sentinel
Experience developing UEBA models, anomaly detection rules, and behavior-based analytics
Experience building Security Automation Playbooks (SOAR)
Microsoft certifications such as: SC-200: Security Operations Analyst, AZ-900 / AZ-104, SC-100 / SC-300
Experience integrating Sentinel with EDR, IAM, firewalls, and ticketing systems
Experience with DevOps pipelines (GitHub, Azure DevOps)
Experience working in a government, healthcare, or regulatory environment
Company
Jobs via Dice
Welcome to Jobs via Dice, the go-to destination for discovering the tech jobs you want.
0-1 employees
Funding
Current Stage
Early StageCompany data provided by crunchbase