Developer

NCC Group; Greater London; On-site; GBP 65,000 - 90,000; Full time

Job summary

NCC Group in London is seeking a Developer for its Threat Intelligence engineering team to design and maintain extensions, automations, and tooling for core platforms. You will build, deploy, secure, monitor, and integrate Python-based components and CLI tools, connecting back-end systems to remove data silos and enable analysts to work more efficiently.

You will collaborate with analysts, engineers, and other developers in a fast-paced DevOps environment, applying cloud concepts,

Qualifications

• Proficiency in Python and Bash.
• DevOps experience in a cloud environment.
• Familiarity with threat intelligence tooling and standards.
• Data transformation and backend systems experience.
• Exposure to open-source software.

Responsibilities

• Develop, deploy, secure, monitor, and maintain Threat Intelligence platform extensions and tooling.
• Build Python application extensions and CLI tooling.
• Link diverse backend systems to break down siloed data repositories.
• Bridge the gap between developers, engineers, and analysts with automation.
• Provide robust support for automatable processes and identify automation opportunities.

Skills

Python

Bash

DevOps

Cloud computing

Data transformation

Threat intel tooling

STIX2/TAXII2

OpenCTI/MIS

Automation

Problem solving

Tools

Docker

Kubernetes

AWS

CLI tooling

Python modules

Open-source software

Job description

Overview

NCC’s Threat Intelligence engineering team is looking for a Developer to support analysts and engineers in delivering a world-class cyber threat intelligence capability. This role will do so by building, deploying, securing, monitoring, and maintaining application extensions, automations, and auxiliary tooling for our primary Threat Intelligence platforms. The role involves building, deploying, securing, monitoring, and maintaining our existing Python application extensions and CLI tooling. It also includes connecting diverse backend systems to break down siloed data repositories and bridging the technical gap between developers, engineers, and analysts by providing automations and tooling. You will support engineers, developers, and analysts by providing robust support for automatable processes and identify automation opportunities within the department.

Responsibilities

• Building, deploying, securing, monitoring, and maintaining application extensions, automations, and auxiliary tooling for Threat Intelligence platforms
• Building, deploying, securing, monitoring, and maintaining Python application extensions and CLI tooling
• Connecting diverse backend systems to break down siloed data repositories
• Plugging the technical gap between developers, engineers, and analysts by providing automations and tooling
• Supporting engineers, developers, and analysts by providing robust support for automatable processes
• Identifying automation opportunities within the department

Qualifications

• Security principals involved when working with cloud computing technologies
• Cloud networking and computing concepts, particularly in AWS
• Proficiency in Python and Bash, particularly in connecting backend systems and building CLI tooling
• Concise explanations of complex technical topics to other members of a DevOps team
• Experience working in a DevOps team
• Problem solving and creative thinking to build new solutions from the ground-up
• Containerisation technologies, including Docker and Kubernetes
• Backend system development
• Data management and transformation
• Threat Intelligence tooling and platforms, such as OpenCTI or MIS
• Familiarity with STIX2/TAXII2 standards
• Experience working with open-source software
• Any additional programming/scripting/development experience