Application Developer (DCO)

DESCRIPTION OF RESPONSIBILITIES :

• Maintain and update SIEM tool software rules for optimal detection of malicious or unauthorized activity.
• Consolidate different data sources into a single view used to assess the status of a specific threat on the network.
• Develop and / or maintain dashboards displaying specific DCO items of interest (i.e., top 10 attackers, top 10 destinations, top attack vector, etc.

And all active cyber incidents, in near real time to the Theater Operations COP (Common Operating Picture) display area and other areas within the RCC-P facility and virtually as identified by the COR.

• Maintain, update, test, and implement signatures and policies for each sensor managed by the RCC-P; changes must be approved through the established CCB process.
• Develop signatures and policies that include both network- and host-based sensors.
• Update as necessary to minimize false positives and validate for proper syntax.
• Conduct all development and testing on isolated networks.
• Document and conduct testing activity with plan procedures, results, and operational procedures as signatures are developed and / or updated.
• Update and validate plan at least annually. A signature test plan shall be developed.
• Monitor sensor infrastructure sensors and agents for failures, performance degradations, or loss of security event visibility, and take corrective action to restore the system to full operation for real-time monitoring of security events.
• Correlate and execute all security events for all Intrusion Protection Systems (IPS) / Intrusion Detection Systems (IDS) within the RCC-P Theater.
• Perform first- and second level (Tier) triage and forward suspicious (cyber events that the triage effort was unable to determine cause) activity to other teams within DCO for further analysis.
• Validate security event information from the cyber incident / event / service tickets which includes at a minimum event name, date, time, location, source IP address, destination IP address, source ports, and destination ports, and contact the responsible Network Enterprise Center (NEC) if additional information is required.
• Other duties as assigned by supervisor.

REQUIRED DEGREE / EDUCATION / CERTIFICATION :

• Bachelor of Science degree in Information Technology, Cybersecurity, Data Science, Information Systems, or Computer Science.
• Must meet at least one of the following baseline certifications in lieu of education : CySA+; Linux +; CEH

REQUIRED SKILLS AND EXPERIENCE :

• Knowledge and minimum two (2) years of experience in Applications Programming.
• Technical skills in network penetration testing and management of network assets.
• Experience with Cybersecurity Service Provider (CSSP) periodic inspections.
• Experience with Army Cyber Security (CS) guidance and regulations.
• Must meet DoD 8140 Software Developer (621)

REQUIRED CITIZENSHIP AND CLEARANCE :

• Must be a U.S. Citizen.
• Minimum Secret clearance; must be TS eligible based on investigation type (T5).

The Alaka ina Foundation Family of Companies (FOCs) is a fast-growing government service provider. Employees enjoy competitive salaries.

Eligible full-time employees enjoy a 401K plan with company match; medical, dental, disability, and life insurance coverage;

tuition reimbursement; paid time off; and 11 paid holidays.