eGRC Senior API Developer

Who we are:

ShorePoint is a fast-growing, industry recognized and award-winning cybersecurity services firm with a focus on high-profile, high-threat, private and public-sector customers who demand experience and proven security models to protect their data. ShorePoint subscribes to a "work hard, play hard" mentality and celebrates individual and company successes. We are passionate about our mission and going above and beyond to deliver for our customers. We are equally passionate about an environment that supports creativity, accountability, diversity, inclusion and a focus on giving back to our community.

The Perks:

As recognized members of the Cyber Elite, we work together in partnership to defend our nation's critical infrastructure while building meaningful and exciting career development opportunities in a culture tailored to the individuals technical and professional growth. We are committed to the belief that our team members do their best work when they are happy and well cared for. In support of this philosophy, we offer a comprehensive benefits package, including major carriers for health care providers. Highlighted benefits offered: 144 hours of PTO, 11 holidays, 85% of insurance premium covered, 401k, continued education, certifications maintenance and reimbursement and more.

Who we're looking for:

We are seeking an eGRC Senior API Developer to support the implementation of a modernized enterprise Governance, Risk and Compliance (eGRC) platform through automation, integration and process optimization. This role is responsible for developing and integrating automation solutions, supporting cybersecurity process modernization and collaborating with stakeholders to improve governance, risk and compliance capabilities. The eGRC Senior API Developer position partners with Professional Services resources and cyber practitioners to deliver secure, efficient and scalable automation solutions. This is a unique opportunity to shape the growth, development and culture of an exciting and fast-growing company in the cybersecurity market.

What you'll be doing:

• Install, configure and deploy workflow technologies for use in a federal environment.
• Integrate Security Orchestration, Automation and Response (SOAR) solutions with RegScale and Axonius.
• Troubleshoot automation solutions, scripts and SOAR platforms.
• Develop custom scripts and content to support automation initiatives.
• Automate cybersecurity and compliance-related processes.
• Perform quality reviews of custom scripts and developed content.
• Practice good technique by utilizing configuration control and code retention tools such as GitHub .
• Participate in documented change control processes.
• Research and document cybersecurity processes, including Risk Management Framework (RMF) 2.0 and Cyber Supply Chain Risk Management (C-SCRM).
• Interview cyber practitioners to capture existing cybersecurity processes.
• Review and recommend enhancements to cybersecurity processes.
• Coordinate with cyber practitioners to refine automation content and ensure mission requirements are met.
• Capture, refine and mature development processes and practices.

What you need to know:

• SOAR technologies and automation concepts.
• Scripting and software development practices.
• Cybersecurity functions, processes and automation.
• RMF functions and processes.
• Configuration management, source code repositories and change control practices.
• Cybersecurity process analysis, documentation and process improvement.

Must have's:

• Bachelor's degree in Information Management, Cybersecurity, Data or a related field.
• One or more of the following certifications: (ISC)2 Certified Information Security Professional (CISSP), CompTIA Security + (Sec+), CAP, CISA, CISM, SSCP, Network + (N+), Certified Ethical Hacker (CEH), PMP, CSM, PMI-ACP.
• 10+ years of relevant experience, including at least 5 years of development or scripting experience and 2 years of cybersecurity operations experience (excluding policy).
• SOAR development experience.
• Strong understanding of cybersecurity functions and processes.
• Strong understanding of RMF functions and processes.
• Experience utilizing code repositories such as GitHub.
• Experience developing custom scripts and content to support automation.
• Experience working with Microsoft Visio.
• Strong interpersonal skills to coordinate with and interview cyber practitioners.
• Proven ability to analyze complex requirements and translate them into clear, actionable tasks and processes through critical thinking.
• Applicants must currently be a U.S. citizen and eligible to obtain and maintain a security clearance, in compliance with federal contract requirements.

Beneficial to have:

• Experience integrating eGRC technologies with external systems.
• Experience with RegScale.
• Experience with Tines SOAR.
• Experience with Splunk Phantom SOAR.
• Experience with Robotic Process Automation (RPA).
• Top Secret/Q clearance.

Where it's done:

• Remote (Herndon, VA).