Security Developer

Position Summary

Metrea's Platform Technology Team is searching for a results-oriented Security Developer with a deep understanding of the M365 technical and security capabilities. Aerospace industry experience would be ideal. Primary responsibilities are focused on cybersecurity analytics development, testing of configuration and configuration management, software security and risk assessment, customized configuration polices, profiles, and system features, and the development of security dashboards and reports. The position will require a strong technical background and good understanding of general cybersecurity events and tables, coupled with the ability to interact with all levels of personnel. Work will primarily be remote, but minimal travel may be required.

Reasonable Accommodations Statement

To perform this job successfully, the individual must be able to perform each duty listed below satisfactorily. Reasonable accommodation may be made to enable qualified individuals with disabilities to perform the essential functions.

Essential Functions Statement

• Work closely with the security and operations team to development and enhancement cybersecurity needs to the overall infrastructure.
• Developing analytics and metrics to support incident and response protocols.
• Conduct threat modeling and support the risk and vulnerability assessment of the Metrea information system.
• Analyze the security of new or existing software applications across the enterprise.
• Review, test and improve existing cybersecurity baselines and configurations on M365 Intune.
• Develop automation scripts to support threat hunting and alerts generation on M365 Sentinel.
• Generate and review security reports for senior management.
• Support the evaluation and improvement of cybersecurity policies and procedures.
• Capable of identifying, prioritizing, strategizing and mitigating risks associated across the enterprise.
• Staying current with emerging security threats, technologies and trends to develop and implement cybersecurity awareness programs, promoting a culture of security within Metrea.

Competency Statements

• Self-motivated; team oriented; responsible, and reliable
• Positive attitude and proactive style. Candidate must have the ability to work in a structured, yet variable environment
• Knowledge of various coding techniques and best practices to mitigate vulnerabilities as well as proficiency in the best practices of secure coding and architecture
• Expertise in M365 technical and security stack and supporting the development of automating security tasks.
• Good understanding of cryptographic algorithms and implementation of encryption, signatures and PKI.
• Ability to design and architect DevSecOps principles and integrate security practices to existing workflows.
• Capable of conducting and supporting tabletop blue/red team exercises.
• Experienced in query-based language for the development of customized alerts and incidents identification within Metrea's SIEM. (KQL preferred).
• Experienced in MDM configuration and profile development (M365 Intune preferred).
• Ability to analytical and systematically breakdown complex problems and develop solutions.
• Capable of communicating and conveying technical information to a broad audience.
• Promote a collaborative environment to foster teamwork and team building.
• Keeping current and actively conduct cybersecurity threats and vulnerabilities assessment.
• Ability to create technical specifications and documentation.
• Strong analytical skills.
• Good grasp of systems from "big picture" integration perspective.
• Expertise in MS Office suite. Visio experience would be a plus.
• Ability to manage multiple tasks with attention to detail and accuracy.
• Must be organized, focused and able to deliver under tight timelines.
• Excellent interpersonal, written, and verbal communications skills, with the ability to interact with various levels of personnel, including end users, management, and developers.

Supervisory Responsibility

This role currently does not have any supervisory responsibilities.

Work Environment

Work will be hybrid. When any onsite visits are required, then this job operates in a clerical office setting. This role routinely uses standard office equipment such as computers, phones, photocopiers, filing cabinets and fax machines.

Position Type and Expected Hours of Work

This is a fulltime position. Typical working hours of Monday through Friday, 9:00 a.m. to 5:00 p.m. EST, which may vary. Hours and work shifts may change in accordance with department and business needs. Exempt employees must have the ability to be on-call and available outside of typical working hours, as business needs require.

Required Education, Experience and Certificates Education: Bachelor's Degree

Experience: 3+ years of experience:

• Security development
• Software security and risk assessment
• M365 Sentinel
• M365 Intune
• M365 Security stack