> Markdown version of [/jobs/ext/483753-defensive-cyber-tool-developer](https://www.wearedevelopers.com/jobs/ext/483753-defensive-cyber-tool-developer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Defensive Cyber Tool Developer

- **Company:** Inc. (dci)
- **Location:** Aberdeen Proving Ground, MD, United States
- **Experience:** Experienced
- **Salary:** $160,000.0 - $200,000.0
- **Contract:** Permanent contract
- **Skills:** Java (Programming Language), Application Programming Interfaces (APIs), Build Automation, Cyber Security, Computer Programming, Intrusion Detection and Prevention, Python (Programming Language), Security Information and Event Management, Software Engineering, Mitre Att&ck, Software Application Programming, Containerization, Kubernetes, Cyber Warfare, Docker, Security Orchestration, Automation & Response, Golang, Microservices
- **Published:** June 4, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=0750c57f65ff588b

## About the Role

Do you have experience in Software engineering?, Do you have a Bachelor's degree?, BS in STEM field

5+ years of direct, hands-on software development experience

3+ years supporting cybersecurity or cyber operations environments

Coding/programming expert in one or more of the following languages

 * Python, Java, Go

DOD IAT level II Certified (preferred)

Experience developing applications in containerized environments

 * Docker
 * Kubernetes

Familiarity/experience with the following

 * MITRE Attack Framework
 * MITRE Defend Framework, * Software Development : 8 years (Preferred)
 * Python programming : 5 years (Preferred)
 * Java programming : 5 years (Preferred)
 * Go programming: 5 years (Preferred)
 * Containerization: 2 years (Preferred)
 * MITRE Attack Framework: 2 years (Preferred)
 * MITRE Defend Framework : 2 years (Preferred)

## Description

Serve as a Defensive Cyber Tool Developer

Design, develop, and maintain defensive cyber tools and capabilities

Build automation for threat detection, analysis, and response workflows

 * Develop APIs, microservices, and containerized applications

Map adversary behaviors to MITRE ATT&CK techniques

Develop corresponding defensive capabilities

Implement and validate defensive countermeasures

 * Using MITRE D3FEND methodologies

Integrate tools with SIEM, EDR, SOAR, and other cybersecurity platforms

Collaborate with cyber analysts, threat hunters, and engineers

 * To improve security operations


## Related Videos

- [Go with the Flow: Stop the Leaks Before Your Memory's a Waterfall!](https://www.wearedevelopers.com/videos/100073-go-with-the-flow-stop-the-leaks-before-your-memory-s-a-waterfall)
- [Docker Compose: Rediscovered](https://www.wearedevelopers.com/videos/1978-docker-compose-rediscovered)
- [Understanding Kubernetes in a visual way](https://www.wearedevelopers.com/videos/100085-understanding-kubernetes-in-a-visual-way)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Microservices: how to get started with Spring Boot and Kubernetes](https://www.wearedevelopers.com/videos/242-microservices-how-to-get-started-with-spring-boot-and-kubernetes)
- [Scoring 2000 Products per Request: Performance Pitfalls in Golang](https://www.wearedevelopers.com/videos/2073-scoring-2000-products-per-request-performance-pitfalls-in-golang)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline)
- [Dev Digest 216: CyberSec + Mythos, Stack Overflow for Agents & DOOM in TTF](https://www.wearedevelopers.com/magazine/728-dev-digest-216-cybersec-mythos-stack-overflow-for-agents-doom-in-ttf)
- [Dev Digest 162: AI careers, MCP, AWS best practices & floppy sweaters](https://www.wearedevelopers.com/magazine/571-dev-digest-162-ai-careers-mcp-aws-best-practices-floppy-sweaters)