Cyber Security Software Engineer (CDSA)

Essential Qualifications/Experience:

·       3+ years practical and hands-on experience in:

ü  Splunk (dashboard development, data models, KVStore, macros, scheduled searches)

ü  Splunk UI development and visualization best practices

ü  Scripting (Python, Bash, or similar)

ü  Interacting with REST APIs or similar

ü  Interacting with Databases

·       Good understanding of cybersecurity concepts (vulnerability management, threat intelligence, incident management)

·       Good communication and analytical skills — able to translate technical topics for operational users and vice versa

·       Strong analytical and problem-solving skills

·       Ability to work operationally with end users while also performing technical development work

·       Language proficiency in English: meet or exceed the NATO STANAG 6001 Level 3 "Professional Proficiency"

Desirable Qualifications/Experience:

·       Certification in Splunk Enterprise

·       Certification in Machine Learning and/or Artificial Intelligence

·       Previous experience with CDSA or similar large Splunk-based platforms.

·       Experience with data integration projects (REST APIs, DB Connect, Cribl, etc.)

·       Knowledge of MITRE ATT&CK or vulnerability scoring methodologies

·       Prior experience with Machine Learning and Artificial Intelligence

·        Previous work in NATO, military, or high-security environments

·       Bachelor's degree at a nationally recognised/certified University in a related discipline and 3 years post-related experience

·       Or exceptionally, the lack of a university degree may be compensated by he demonstration of a candidate's particular abilities or experience that is/are of interest to NCIA, that is, at least 10 years extensive and progressive expertise in duties related to those in this Statement of Work

DUTIES/ROLE:

·       Technical Development & Maintenance

ü  Develop and maintain CDSA dashboards, visualizations, and UI components in Splunk

ü  Perform hands-on work on data models, KVStore collections, scheduled searches, and macros

ü  Implement small to medium enhancements and fixes based on operational needs and user feedback

ü  Support the integration of new data sources and tools into CDSA (e.g. PLM, ACPV, Cribl, etc.)

ü  Develop scripts and automation to improve data processing and platform operations

·       Operational Support & CyOC Coordination

ü  Provide technical and operational support to CyOC users on a day-to-day basis

ü  Act as a technical bridge between CyOC operational needs and the development contractor (Infigo/King ICT)

ü  Validate and test new dashboards and features delivered by the contractor before they go into production

ü  Collect and prioritize user feedback from CyOC and translate it into actionable technical tasks

ü  Support Early Life Support (ELS) activities for new features and releases

·       Platform Health & Improvement

ü  Monitor dashboard performance, data quality, and overall platform health

ü  Identify opportunities for improvement in existing dashboards and data pipelines

ü  Contribute to the technical roadmap and evolution of the CDSA platform