Apply on Employer Site

Booz Allen Hamilton · 8 hours ago

Cyber Capability Developer

Redstone Arsenal, AL

Full-time

Hybrid

Senior Level

$69K/yr - $158K/yr

5+ years exp

Booz Allen Hamilton is seeking a Cyber Capability Developer to design and maintain systems for automating cyber activities. The role involves applying industry knowledge and guiding junior employees while working on complex cybersecurity problems.

ConsultingCyber SecurityIT InfrastructureManagement ConsultingSecurity

Growth Opportunities

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Design, implement, integrate, and maintain systems and tools to automate complex cyber activities

Apply specific functional, working, and general industry knowledge

Develop or contribute to solutions to a variety of problems of moderate scope and complexity

Work independently with some guidance

Review or guide activities of more junior employees

Qualification

Cybersecurity threat detectionScripting BashScripting PowerShellScripting PythonScripting SQLScripting JavaSplunk (SPL)Cloud engineering AWSCloud engineering AzureSecurity orchestrationAutomationLinux environmentsCyber threat intelligenceData sourcingIntegrationGIAC certifications

Required

5+ years of experience with Cybersecurity threat detection engineering, alert and analytics development, display, and deployments

5+ years of experience scripting, including Bash scripting, PowerShell, Python, SQL, and Java

4+ years of experience with Splunk, including Splunk Search Processing Language (SPL)

4+ years of experience with Sentinel

Knowledge of Cloud engineering, including AWS or Azure GovCloud

TS/SCI clearance

Bachelor's degree and 4+ years of experience with threat detection, SOC, or watch floor, or Master's degree and 2+ years of experience with threat detection, SOC, or watch floor

Preferred

Experience utilizing cyber threat intelligence for engineering optimization

Experience with Splunk backend engineering, including log or data onboarding, ingestion, visualization, testing, and validation

Experience with implementing, operating, maintaining, and optimizing security orchestration, automation, and response systems and tools

Experience designing, implementing, and optimizing cybersecurity data pipelines

Experience engineering, maintaining, optimizing, and developing within Linux environments

Knowledge of data sourcing, integration, and analyses to establish baselines and detect anomalous activities

GIAC Continuous Monitoring (GMON), GIAC Certified Incident Handler (GCIH), GIAC Certified Forensic Analyst (GCFA), GIAC Certified Intrusion Analyst (GCIA), and GIAC Network Forensic Analyst (GNFA) Certifications