Software Developer 2

Job Description

The Software Developer II performs advanced (senior-level) software development work focused on designing, building, testing, and optimizing Microsoft Sentinel capabilities for DSHS projects. This role is responsible for developing custom automation playbooks, analytics rules, behavioral models, connectors, and integrations to support SOAR and UEBA functionality. The position works under limited supervision with considerable latitude for initiative, independent judgment, and technical leadership.

Essential Job Functions (EJFs)

1. Microsoft Sentinel SOAR Development (40%)

• Designs, develops, tests, and deploys Sentinel SOAR automation playbooks using Azure Logic Apps, Azure Functions, ARM templates, and REST APIs.
• Creates automated workflows for alert enrichment, triage, response actions, notification processes, and case management.
• Integrates Sentinel with third-party systems (EDR, IAM, ticketing systems, email gateways, firewalls, etc.) to automate security operations.

2. UEBA & Analytics Engineering (30%)

3. SIEM Content Development & Platform Engineering (15%)

4. Application Development & Integration (10%)

5. Documentation, Collaboration & Support (5%)

Knowledge, Skills, and Abilities (KSAs)

Knowledge of :

Skills in :

Abilities to :

Requirements

CANDIDATE SKILLS AND QUALIFICATIONS

Minimum Requirements :

Candidates that do not meet or exceed the minimum stated requirements (skills / experience) will be displayed to customers but may not be chosen for this opportunity.

Years

Required / Preferred

Experience

Required

Graduation from an accredited four-year college or university with major coursework in computer science, computer information systems, software engineering, cybersecurity, or a related field.

Required

Two (2) years of full-time experience in software development, cloud engineering, SIEM engineering, or cybersecurity engineering.

Required

Two (2) years of full-time experience in software development, cloud engineering, SIEM engineering, or cybersecurity engineering.

Preferred

Three (3) or more years of hands-on technical experience with Microsoft Sentinel.

Preferred

Experience developing UEBA models, anomaly detection rules, and behavior-based analytics.

Preferred

Experience building Security Automation Playbooks (SOAR).

Preferred

Microsoft certifications such as : SC-200 : Security Operations Analyst, AZ-900 / AZ-104, SC-100 / SC-300

Preferred

Experience integrating Sentinel with EDR, IAM, firewalls, and ticketing systems.

Preferred

Experience with DevOps pipelines (GitHub, Azure DevOps).

Preferred

Experience working in a government, healthcare, or regulatory environment.