Senior eGRC API Developer - RMF 102257

The Information Technology
Washington, DC, United States
about 1 month ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
2 years minimum
Working hours
Regular working hours

Tech stack

Microsoft Word Microsoft Excel Application Programming Interfaces (APIs) Artificial Intelligence Configuration Management Cyber Security Data Discovery Github Information Management Microsoft Visio Robotic Automation Software Microsoft SharePoint
+3 more
Scripting Cyber Warfare Splunk

Job description

As an eGRC Senior API Developer supporting client’s RegScale implementation, you will play a pivotal role in migrating and transforming complex data sets to support a secure, compliant, and modernized governance, risk, and compliance environment. Your responsibilities will include performing in-depth data discovery, analyzing exports, and mapping legacy schemas to OSCAL-compliant formats. You will be tasked with developing automated scripts for data parsing and extraction, leveraging AI tools to streamline migration activities, and drafting detailed assessments and reports to document your progress. Collaborating closely with Professional Services teams, you will coordinate the migration of RMF, such as System Security Plans, Control Artifacts, and Assessment Trackers, often sourced from Excel, MS Word, or SharePoint repositories., * Install, configure, and deploy workflow technologies for use in a federal environment.

  • Integrate SOAR with RegScale.
  • Integrate SOAR with Axonius.
  • Perform troubleshooting of automation, scripts, and SOAR systems.
  • Develop custom scripts and content to facilitate automation.
  • Automate cybersecurity and compliance related processes.
  • Perform Quality Review of custom scripts and developed content.
  • Practice good technique by utilizing configuration control and code retention tools such as GitHub .
  • Abide by and participate in documented Change Control processes.
  • Research and document cyber processes, such as Risk Management Framework (RMF) 2.0 and Cyber Supply Chain Risk Management (C-SCRM).
  • Interview Cyber Practitioners to capture current cyber processes.
  • Review and propose potential enhancements or optimization to cyber processes.
  • Coordinate and collaborate with cyber practitioners to tune and refine developed content to meet mission needs.
  • Capture, refine, and mature development processes and practices.

Requirements

  • SOAR experience.
  • Scripting and development experience.
  • Bachelor’s degree in Information Management, Cybersecurity, Data, or a related field.
  • 10+ years of relevant experience.
  • 5 years of development or scripting experience.
  • 2 years of cyber operations (not including policy) experience.
  • SOAR development experience.
  • Strong understanding of Cybersecurity functions and processes.
  • Strong understanding of Risk Management Framework functions and processes.
  • Experience utilizing code retention tools such as GitHub.
  • Experience developing custom scripts and content to facilitate automation.
  • Experience working with MS Visio.
  • Strong social skills are required to coordinate with and interview cyber practitioners.

Desired Skills:

  • Experience integrating eGRC technologies with external systems.
  • RegScale experience.
  • Tines SOAR experience.
  • Splunk Phantom SOAR experience.
  • Experience working with Robotics Process Automation (RPA).

Education:

  • Bachelor’s degree in Information Management, Cybersecurity, Data, or a related field.

About the company

Since 1999, ITEC has delivered mission-critical support to the DoD and Intelligence Community. Now part of ManpowerGroup Public Sector (MGPS), we continue that work with expanded capabilities. Employees hired through this process will join MGPS and receive a comprehensive benefits package and competitive pay.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.clearancejobs.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

1:45 min

Transitioning from software development to security roles

Stefania Chaplin · World Congress 2022

1:04 min

Introduction to Bitcoin script parsing tools

Steve Shadders · LIVE

2:38 min

Establishing comprehensive monitoring and log management

Michael Eder +1 · LIVE

6:36 min

Funding open source through GitHub Accelerator and Sponsors

Stormy Peters · World Congress 2023

1:53 min

Evaluating traditional scripting languages for modern development tasks

Jens Knipper Jens Knipper · Europe 2026 Virtual

3:10 min

Correlating dispersed logs using structured request tracing

Michael Eder +1 · LIVE

Videos

See all

Related articles

See all