API Security IAM Job at Openkyber, Georgia

czE3M2JBUWZWMlFmRGVYZS8zS1RzSjBSTEE9PQ==
  • Openkyber
  • Georgia

Job Description

Hiring: W2 Candidates Only Visa: Open to any visa type with valid work authorization in the USA 1. Microsoft Sentinel SOAR Development (40%) Designs, develops, tests, and deploys Sentinel SOAR automation playbooks using Azure Logic Apps, Azure Functions, ARM templates, and REST APIs. Creates automated workflows for alert enrichment, triage, response actions, notification processes, and case management. Integrates Sentinel with third-party systems (EDR, IAM, ticketing systems, email gateways, firewalls, etc.) to automate security operations.

2. UEBA & Analytics Engineering (30%) Develops custom UEBA detection rules , anomaly models, ML-based behavior patterns, and advanced hunting queries (KQL). Builds and maintains analytics content, data parsers, normalization rules, and entity behavior profiles. Evaluates behavioral anomalies and collaborates with cybersecurity teams to fine-tune detection logic.

3. SIEM Content Development & Platform Engineering (15%) Designs and implements custom data connectors, ingestion pipelines, and data transformation logic. Creates dashboards, workbooks, hunting queries, and detection-as-code assets. Performs platform tuning to improve performance, reduce noise, and align to MITRE ATT&CK and Zero Trust principles.

4. Application Development & Integration (10%) Develops supporting code modules, scripts, microservices, and helper APIs using Python, PowerShell, .NET, or similar languages. Works with DevOps pipelines, CI/CD processes, version control, and infrastructure-as-code where applicable.

5. Documentation, Collaboration & Support (5%) Writes technical design documents, SOPs, architecture diagrams, and automation runbooks. Collaborates with DSHS, HHSC CISO Office, and cross-functional stakeholders on requirements, testing, and deployment. Provides Tier III support for Sentinel engineering issues and participates in after-action reviews when needed.

Knowledge, Skills, and Abilities (KSAs) Knowledge of:
  • Microsoft Sentinel architecture, SOAR, and UEBA capabilities.
  • Azure cloud services, Logic Apps, Azure Functions, Event Hubs, Key Vault, and Azure AD.
  • Security operations processes (triage, threat detection, incident response, threat modeling).
  • MITRE ATT&CK, NIST CSF, Zero Trust Architecture concepts.
  • Programming and scripting languages (Python, PowerShell, KQL, C#, JavaScript, or equivalent).
  • CI/CD pipelines, DevOps practices, and Git-based version control.
  • API integrations and JSON/YAML structures.
Skills in:
  • Building Logic App workflows and custom Sentinel automation playbooks.
  • Writing complex KQL queries for analytics, hunting, and behavioral detection.
  • Developing custom connectors, data maps, and parsers.
  • Designing and optimizing UEBA detection models.
  • Debugging SOAR workflows and resolving integration issues.
  • Communicating technical information clearly to both technical and non-technical audiences.
Abilities to:
  • Work independently and take ownership of complex development tasks.
  • Translate security requirements into scalable technical solutions.
  • Analyze threat behaviors and develop meaningful detections.
  • Work collaboratively with cybersecurity, infrastructure, and application teams.
  • Manage multiple work assignments and meet deadlines.

CANDIDATE SKILLS AND QUALIFICATIONS 8Years-Required-Graduation from an accredited four-year college or university with major coursework in computer science, computer information systems, software engineering, cybersecurity, or a reated field. 4 Years -Required-Two (2) years of full-time experience in software development, cloud engineering, SIEM engineering, or cybersecurity engineering. 4 Years -Required-Two (2) years of full-time experience in software development, cloud engineering, SIEM engineering, or cybersecurity engineering. 3 Years -Preferred-Three (3) or more years of hands-on technical experience with Microsoft Sentinel. 1 Years -Preferred-Experience developing UEBA models, anomaly detection rules, and behavior-based analytics. 1 Years -Preferred-Experience building Security Automation Playbooks (SOAR). 1 Years -Preferred-Microsoft certifications such as: SC-200: Security Operations Analyst, AZ-900 / AZ-104, SC-100 / SC-300 1 Years -Preferred-Experience integrating Sentinel with EDR, IAM, firewalls, and ticketing systems. 1 Years -Preferred-Experience with DevOps pipelines (GitHub, Azure DevOps). 1 Years -Preferred-Experience working in a government, healthcare, or regulatory environment.

For applications and inquiries, contact: hirings@openkyber.com

Job Tags

Full time, Work at office,

Similar Jobs

Schlumberger

Geoscience and Petrotechnical Internship Job at Schlumberger

 ...into the work we do. From day one, you'll contribute to ongoing projects and see the difference you make. We have opportunities in geology, geophysics, petrophysics, and petroleum engineering. When you apply, we'll match you to a team that suits your academic experience... 

Solar Pros

Solar Sales Consultant (Retail & Field) - Pensacola Job at Solar Pros

 ...solutions Build strong relationships in the local community Represent Solar Pros with professionalism and confidence What We're...  ... Comfortable with in-person customer interaction No experience required. We train you from the ground up. Details Full... 

Exterior Land Development

Landscape Construction Team Member Job at Exterior Land Development

 ...deliver luxurious and long-lasting outdoor living spaces that wow guests and family members. Led by owner and project manager George Michaels, our team has over 40 years combined experience creating breathtaking outdoor spaces, specializing in patios, retaining walls,... 

Johns Hopkins University

MTA/DUA Study Start-up Program Manager (Office of Clinical Trials) Job at Johns Hopkins University

 ...We are seeking a MTA/DUA Study Start-Up Program Manager who will be responsible for planning and directing the day-to-day operations, staffing, training, professional development, performance evaluation, and budgetary needs of the Johns Hopkins School of Medicine Office... 

Univar Solutions

Sales Account Manager I Job at Univar Solutions

 ...This is why we are seeking a driven, curious, relentless, and relationship-focused problem-solver to join our team as a Sales Account Manager in our Maine or New Hampshire location. Our Sales Account Managers are responsible for growing our business with new...