Who we are:
ShorePoint is a fast-growing, industry recognized and award-winning cybersecurity services firm with a focus on high-profile, high-threat, private and public-sector customers who demand experience and proven security models to protect their data. ShorePoint subscribes to a “work hard, play hard” mentality and celebrates individual and company successes. We are passionate about our mission and going above and beyond to deliver for our customers. We are equally passionate about an environment that supports creativity, accountability, diversity, inclusion and a focus on giving back to our community.
The Perks:
As recognized members of the Cyber Elite, we work together in partnership to defend our nation’s critical infrastructure while building meaningful and exciting career development opportunities in a culture tailored to the individuals technical and professional growth. We are committed to the belief that our team members do their best work when they are happy and well cared for. In support of this philosophy, we offer a comprehensive benefits package, including major carriers for health care providers. Highlighted benefits offered: 144 hours of PTO, 11 holidays, 85% of insurance premium covered, 401k, continued education, certifications maintenance and reimbursement and more.
Who we’re looking for:
We are seeking an eGRC Senior API Developer to support the implementation of a modernized enterprise Governance, Risk and Compliance (eGRC) platform through automation, integration and process optimization. This role is responsible for developing and integrating automation solutions, supporting cybersecurity process modernization and collaborating with stakeholders to improve governance, risk and compliance capabilities. The eGRC Senior API Developer position partners with Professional Services resources and cyber practitioners to deliver secure, efficient and scalable automation solutions. This is a unique opportunity to shape the growth, development and culture of an exciting and fast-growing company in the cybersecurity market.
What you’ll be doing:
- Install, configure and deploy workflow technologies for use in a federal environment.
- Integrate Security Orchestration, Automation and Response (SOAR) solutions with RegScale and Axonius.
- Troubleshoot automation solutions, scripts and SOAR platforms.
- Develop custom scripts and content to support automation initiatives.
- Automate cybersecurity and compliance-related processes.
- Perform quality reviews of custom scripts and developed content.
- Practice good technique by utilizing configuration control and code retention tools such as GitHub .
- Participate in documented change control processes.
- Research and document cybersecurity processes, including Risk Management Framework (RMF) 2.0 and Cyber Supply Chain Risk Management (C-SCRM).
- Interview cyber practitioners to capture existing cybersecurity processes.
- Review and recommend enhancements to cybersecurity processes.
- Coordinate with cyber practitioners to refine automation content and ensure mission requirements are met.
- Capture, refine and mature development processes and practices.
What you need to know:
- SOAR technologies and automation concepts.
- Scripting and software development practices.
- Cybersecurity functions, processes and automation.
- RMF functions and processes.
- Configuration management, source code repositories and change control practices.
- Cybersecurity process analysis, documentation and process improvement.
Must have’s:
- Bachelor’s degree in Information Management, Cybersecurity, Data or a related field.
- One or more of the following certifications: (ISC)2 Certified Information Security Professional (CISSP), CompTIA Security + (Sec+), CAP, CISA, CISM, SSCP, Network + (N+), Certified Ethical Hacker (CEH), PMP, CSM, PMI-ACP.
- 10+ years of relevant experience, including at least 5 years of development or scripting experience and 2 years of cybersecurity operations experience (excluding policy).
- SOAR development experience.
- Strong understanding of cybersecurity functions and processes.
- Strong understanding of RMF functions and processes.
- Experience utilizing code repositories such as GitHub.
- Experience developing custom scripts and content to support automation.
- Experience working with Microsoft Visio.
- Strong interpersonal skills to coordinate with and interview cyber practitioners.
- Proven ability to analyze complex requirements and translate them into clear, actionable tasks and processes through critical thinking.
- Applicants must currently be a U.S. citizen and eligible to obtain and maintain a security clearance, in compliance with federal contract requirements.
Beneficial to have:
- Experience integrating eGRC technologies with external systems.
- Experience with RegScale.
- Experience with Tines SOAR.
- Experience with Splunk Phantom SOAR.
- Experience with Robotic Process Automation (RPA).
- Top Secret/Q clearance.
Where it’s done:
- Remote (Herndon, VA) - Minimal travel and occasional onsite visits required.
Skills Required
- Bachelor's degree in Information Management, Cybersecurity, Data or related field
- One or more listed certifications (CISSP, Security+, CAP, CISA, CISM, SSCP, Network+, CEH, PMP, CSM, PMI-ACP)
- 10+ years relevant experience (including 5+ years development/scripting and 2+ years cybersecurity operations)
- SOAR development experience
- Experience developing custom scripts and automation content
- Experience using code repositories such as GitHub
- Experience working with Microsoft Visio
- Strong understanding of cybersecurity functions, RMF processes, and process analysis/documentation
- Ability to coordinate and interview cyber practitioners and translate requirements into tasks
- Applicants must be U.S. citizens and eligible to obtain and maintain a security clearance
- Experience integrating eGRC technologies with external systems
- Experience with RegScale
- Experience with Tines SOAR
- Experience with Splunk Phantom SOAR
- Experience with Robotic Process Automation (RPA)
- Top Secret/Q clearance
What We Do
ShorePoint recognizes that cybersecurity is the challenge of our generation. Our vision is to be the premier provider of cybersecurity services, delivering a security model capable of keeping pace with today’s rapidly changing landscape. ShorePoint is a privately-held cybersecurity services company with the experience and capabilities needed to help public and private sector clients protect their most critical assets from cyber threats. Founded by cybersecurity veterans Matt Brown and Scott Ackerman and amplified by executives Ryan McCullough and Rob Palmer, ShorePoint offers a focus on establishing meaningful cyber defense strategies across the full cyber lifecycle. We bring a deep expertise in the Department of Homeland Security (DHS) Continuous Diagnostics and Mitigation (CDM) program, a technology and vendor agnostic mindset, and small firm agility, ingenuity and responsiveness. The ShorePoint team has designed, implemented and managed proven cyber programs for critical missions within the federal civilian, defense, and intelligence community, and has extensive commercial experience supporting high technology, financial services, critical infrastructure, and healthcare. Beyond excelling in our craft, what sets ShorePoint apart is our culture: a high energy and flexible work environment that enables our team to creatively tackle the cyber challenges of today. We empower and support our employees in outreach programs with a corporate culture focused on being an active member in improving our community.
