Overview
On Site
Contract - W2
Skills
IT Consulting
Computer Science
Information Systems
Software Engineering
Software Development
Cloud Computing
Incident Management
Threat Modeling
C#
JavaScript
Git
API
JSON
YAML
Writing
Debugging
GitHub
Health Care
Microsoft
Microsoft Azure
ARM
Workflow
Management
Firewall
Security Operations
Machine Learning (ML)
Analytics
Normalization
Cyber Security
SIEM
Content Development
Dashboard
Application Development
Scripting
Microservices
Python
Windows PowerShell
.NET
DevOps
Continuous Integration
Continuous Delivery
Version Control
Documentation
Collaboration
Technical Drafting
Testing
Law
Job Details
- JOB-7512
- Software Developer 2
- Austin, TX
- Contract
- Link Technologies (LinkTechConsulting.com), a Las Vegas-based IT consulting firm, is currently seeking a Software Developer 2 to join our team.
JOB SUMMARY
This role is responsible for developing custom automation playbooks, analytics rules, behavioral models, connectors, and integrations to support SOAR and UEBA functionality.
QUALIFICATIONS- Bachelor's degree from an accredited college or university with major coursework in computer science, computer information systems, software engineering, cybersecurity, or a related field.
- Minimum of two (2) years of experience in software development, cloud engineering, SIEM engineering, or cybersecurity engineering.
- Knowledge of:
- Microsoft Sentinel architecture, SOAR, and UEBA capabilities.
- Azure cloud services, Logic Apps, Azure Functions, Event Hubs, Key Vault, and Azure AD.
- Security operations processes (triage, threat detection, incident response, threat modeling).
- MITRE ATT&CK, NIST CSF, Zero Trust Architecture concepts.
- Programming and scripting languages (Python, PowerShell, KQL, C#, JavaScript, or equivalent).
- CI/CD pipelines, DevOps practices, and Git-based version control.
- API integrations and JSON/YAML structures.
- Building Logic App workflows and custom Sentinel automation playbooks.
- Writing complex KQL queries for analytics, hunting, and behavioral detection.
- Developing custom connectors, data maps, and parsers.
- Designing and optimizing UEBA detection models.
- Debugging SOAR workflows and resolving integration issues.
- Communicating technical information clearly to both technical and non-technical audiences.
- Work independently and take ownership of complex development tasks.
- Translate security requirements into scalable technical solutions.
- Analyze threat behaviors and develop meaningful detections.
- Work collaboratively with cybersecurity, infrastructure, and application teams.
- Manage multiple work assignments and meet deadlines.
PREFERRED- Minimum of three (3) years of hands-on technical experience with Microsoft Sentinel.
- Minimum of one (1) year of experience in the following areas:
- Developing UEBA models, anomaly detection rules, and behavior-based analytics.
- Building Security Automation Playbooks (SOAR).
- Integrating Sentinel with EDR, IAM, firewalls, and ticketing systems.
- DevOps pipelines (GitHub, Azure DevOps).
- Working in a government, healthcare, or regulatory environment.
- Microsoft certifications such as: SC-200: Security Operations Analyst, AZ-900 / AZ-104, SC-100 / SC-300
RESPONSIBILITIES
Microsoft Sentinel SOAR Development- Designs, develops, tests, and deploys Sentinel SOAR automation playbooks using Azure Logic Apps, Azure Functions, ARM templates, and REST APIs.
- Creates automated workflows for alert enrichment, triage, response actions, notification processes, and case management.
- Integrates Sentinel with third-party systems (EDR, IAM, ticketing systems, email gateways, firewalls, etc.) to automate security operations.
UEBA and Analytics Engineering- Develops custom UEBA detection rules, anomaly models, ML-based behavior patterns, and advanced hunting queries (KQL).
- Builds and maintains analytics content, data parsers, normalization rules, and entity behavior profiles.
- Evaluates behavioral anomalies and collaborates with cybersecurity teams to fine-tune detection logic.
SIEM Content Development and Platform Engineering- Designs and implements custom data connectors, ingestion pipelines, and data transformation logic.
- Creates dashboards, workbooks, hunting queries, and detection-as-code assets.
- Performs platform tuning to improve performance, reduce noise, and align to MITRE ATT&CK and Zero Trust principles.
Application Development and Integration- Develops supporting code modules, scripts, microservices, and helper APIs using Python, PowerShell, .NET, or similar languages.
- Works with DevOps pipelines, CI/CD processes, version control, and infrastructure-as-code where applicable.
Documentation, Collaboration and Support- Writes technical design documents, SOPs, architecture diagrams, and automation runbooks.
- Collaborates with DSHS, HHSC CISO Office, and cross-functional stakeholders on requirements, testing, and deployment.
- Provides Tier III support for Sentinel engineering issues and participates in after-action reviews when needed.
Link Technologies is an equal opportunity employer. All qualified applicants will receive consideration for employment without discrimination based on race, color, religion, sex, gender identity/expression, sexual orientation, national origin, protected veteran status, disability, or any other factors protected by law.
Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.