Cyber Software Engineer

Overview

Cyber Software Engineer – Fort Gordon, GA. Requisition :  Clearance:
Top Secret/SCI w/ Poly. Position Category:
Information Technology.

• Peraton seeks a Cyber Software Engineer to support Army Cyber Command Defensive Cyberspace Operations (DCO).
  
  Location:
  
  Fort Gordon, GA.
• This is a hands-on, code-forward technical role. The selected candidate will author custom detection analytics and hunt tooling, execute proactive threat hunting operations across the DoDIN-A, and translate threat intelligence into operationalized detection logic, in support of Defensive Cyberspace Operations.
• Build and execute: writing Python-based analytics, developing Sigma rules, crafting complex SQL queries, and running those signatures against live telemetry to identify adversarial activity that evades traditional security boundaries.
• Query and synthesize reporting from Cyber Threat Intelligence (CTI) repositories—including government, OSINT, and commercial-leased CTI platforms—to source and vector threat hunting analytics. Findings must be documented and communicated for senior leadership and general officer briefings.
• Design, build, and implement advanced detection analytics using Python; integrate SQL queries into Python-based logic to correlate real-time telemetry with threat research and adversarial TTPs as described by MITRE ATT&CK.
• Execute proactive cyber threat hunting across the DoDIN-A using custom-developed analytics; identify adversarial artifacts, anomalies, IOAs, and IOCs.
• Develop and maintain Sigma rules and translate those rules into complex SQL queries tailored to data repositories.
• Develop SIEM-based analytics to identify adversaries’ behaviors, goals, and methods; identify gaps within the DoDIN-A security boundary.
• Review and analyze data feeds to ensure relevance and synchronization with DCO priorities.
• Draft comprehensive operational notes and hunt findings; articulate complex technical data for senior leadership and general officer briefings.
• Use advanced data visualization techniques to distill complex technical datasets into clear, actionable presentations for diverse audiences.
• Communicate complex cybersecurity insights through briefings, reports, and visualization tools.
• Create and maintain continuity documents necessary for team members to produce contractual deliverables.

Required:

• Minimum of 8 years with a BS/BA; minimum of 6 years with an MS/MA; minimum of 3 years with a PhD. Will consider 10 years with an Associate degree or 12 years with a HS diploma.
• Advanced coding fluency in Python, with demonstrated ability to build data-driven security analytics and custom hunt tooling.
• High proficiency in data querying and logic development using SQL, and Sigma rule creation.
• Intimate, practical knowledge of the MITRE ATT&CK Enterprise framework and its application in mapping adversarial TTPs to defensive analytics.
• Ability to query, navigate, and extract actionable intelligence from CTI repositories, including commercial-leased platforms.
• Deep understanding of cyber attack vectors, vulnerability exploitation, and network defense principles to support DCO priorities.
• Exceptional professional writing capabilities; ability to synthesize highly technical hunt findings into clear, concise reports for executive-level consumption.
• Effective communication and collaboration skills to ensure team responsiveness and data feed relevance to DCO priorities.
• Requires at least one of the following: CCNA-Security, CySA+, GICSP, GSEC, Security+, CND, or SSCP.
• Requires at least one of the following: CEH, CFR, CCNA Cyber Ops, CCNA-Security, CySA+, GCIA, GCIH, GICSP, Cloud+, SCYBER, or Pen Test+.
• U.S. Citizenship required.
• Active TS/SCI with the ability to obtain/maintain CI Polygraph and MEAD.
• Flexibility to support surge operations and adapt to rapidly shifting mission requirements as dictated by Army Cyber Command.

Preferred:

• Authoring solutions within the Microsoft Power Platform (Power BI, Power Automate, Power Apps, Power Query) to support operational reporting and dashboards.
• Knowledge of data science methodologies, including statistical analysis, anomaly detection, and machine learning.
• Experience…