Software Developer, Cybersecurity

Position: Software Developer 2

Hello Associates,

*** Greetings from My3

Tech***

Position:
Software Developer 2

Location:

Austin, TX (Onsite) Duration: 8+ Months

Job Description

Texas Health and Human Services Commission requires the services of 1 Software Developer 2, hereafter referred to as Candidate(s), who meets the general qualifications of Software Developer 2, Applications/Software Development and the specifications outlined in this document for the Texas Health and Human Services Commission .

All work products resulting from the project shall be considered “works made for hire” and are the property of the Texas Health and Human Services Commission and may include pre-selection requirements that potential Vendors (and their Candidates) submit to and satisfy criminal background checks as authorized by Texas law. Texas Health and Human Services Commission will pay no fees for interviews or discussions, which occur during the process of selecting a Candidate(s).

The Software Developer II performs advanced (senior-level) software development work focused on designing, building, testing, and optimizing Microsoft Sentinel capabilities for DSHS projects. This role is responsible for developing custom automation playbooks, analytics rules, behavioral models, connectors, and integrations to support SOAR and UEBA functionality. The position works under limited supervision with considerable latitude for initiative, independent judgment, and technical leadership.

Essential

Job Functions (EJFs) 1. Microsoft Sentinel SOAR Development (40%)

Designs, develops, tests, and deploys Sentinel SOAR automation playbooks using Azure Logic Apps, Azure Functions, ARM templates, and REST APIs.

Creates automated workflows for alert enrichment, triage, response actions, notification processes, and case management.

Integrates Sentinel with third-party systems (EDR, IAM, ticketing systems, email gateways, firewalls, etc.) to automate security operations.

2. UEBA & Analytics Engineering (30%)

Develops custom UEBA detection rules, anomaly models, ML-based behavior patterns, and advanced hunting queries (KQL).

Builds and maintains analytics content, data parsers, normalization rules, and entity behavior profiles.

Evaluates behavioral anomalies and collaborates with cybersecurity teams to fine-tune detection logic.

3. SIEM Content Development & Platform Engineering (15%)

Designs and implements custom data connectors, ingestion pipelines, and data transformation logic.

Creates dashboards, workbooks, hunting queries, and detection-as-code assets.

Performs platform tuning to improve performance, reduce noise, and align to MITRE ATT&CK and Zero Trust principles.

4. Application Development & Integration (10%)

Develops supporting code modules, scripts, microservices, and helper APIs using Python, Power Shell, .NET, or similar languages.

Works with Dev Ops pipelines, CI/CD processes, version control, and infrastructure-as-code where applicable.

5. Documentation, Collaboration & Support (5%)

Writes technical design documents, SOPs, architecture diagrams, and automation runbooks.

Collaborates with DSHS, HHSC CISO Office, and cross-functional stakeholders on requirements, testing, and deployment.

Provides Tier III support for Sentinel engineering issues and participates in after-action reviews when needed.

Knowledge, Skills, and Abilities (KSAs) Knowledge of:

Microsoft Sentinel architecture, SOAR, and UEBA capabilities.

Azure cloud services, Logic Apps, Azure Functions, Event Hubs, Key Vault, and Azure AD.

Security operations processes (triage, threat detection, incident response, threat modeling).

MITRE ATT&CK, NIST CSF, Zero Trust Architecture concepts.

Programming and scripting languages (Python, Power Shell, KQL, C#, JavaScript, or equivalent).

CI/CD pipelines, Dev Ops practices, and Git-based version control.

API integrations and JSON/YAML structures.

Skills in:

Building Logic App workflows and custom Sentinel automation playbooks.

Writing complex KQL queries for analytics, hunting, and behavioral detection.

Developing custom connectors, data maps, and parsers.

Designing and optimizing UEBA detection models.

Debugging SOAR workflows and resolving integration issues.

Communicating technical…