Python Developer

📋 Description

• • Join Linkllc’s elite cyber modernization team as a Python Developer and architect the next generation of passive network sensors that defend national security assets. You will design, build, and refine high-throughput analytic engines that process terabytes of PCAP in real time, turning raw network traffic into actionable intelligence for cyber operators and decision-makers.
• • Own the full lifecycle of analytic features—from requirements capture with NSA mission partners, through Python micro-service development, rigorous unit testing, and deployment into an Agency-wide processing framework. Your code will directly influence how quickly threats are discovered, characterized, and neutralized.
• • Leverage deep protocol knowledge (TCP, UDP, ICMP, HTTP, SMTP, SSH, DNS, TLS) to reverse-engineer adversary behaviors and craft precise detection fingerprints. You will dissect packet captures in Wireshark, identify anomalies, and translate findings into robust Python parsers and plugins that run at line speed.
• • Develop extensible, modular Python libraries that ingest PCAP, extract protocol metadata, and emit enriched events to downstream consumers. You will optimize for memory efficiency and low-latency processing on Linux clusters, ensuring the system scales horizontally as data volumes grow.
• • Integrate your analytics into the Agency’s flagship processing system by writing custom plugins, rule sets, and configuration templates. You will collaborate with SIGINT engineers to guarantee compatibility with existing data pipelines and security boundaries.
• • Collaborate daily with network exploitation analysts, data scientists, and cloud architects in an Agile/Scrum environment. You will participate in sprint planning, daily stand-ups, and retrospectives, presenting demos that showcase new detection capabilities and performance gains.
• • Contribute to a living knowledge base of adversary tactics, techniques, and procedures (TTPs). You will document your findings in Confluence, share lessons learned in brown-bag sessions, and mentor junior developers on protocol reverse engineering and secure coding practices.
• • Automate build, test, and deployment workflows using GitLab CI/CD, Docker, and Kubernetes. You will maintain IaC scripts (Terraform/Ansible) that provision analytic nodes in classified cloud enclaves, ensuring repeatable, auditable releases.
• • Conduct continuous performance profiling and tuning. You will use cProfile, Py-spy, and BPF tools to identify bottlenecks, refactor hot paths, and reduce CPU and memory footprints without sacrificing detection fidelity.
• • Uphold the highest standards of code quality and security. You will participate in peer reviews, static analysis scans, and threat-modeling sessions, ensuring every commit meets ICD-503 controls and NSA secure development guidelines.
• • Work in a hybrid model—up to 60 % telework—while maintaining seamless collaboration with on-site teammates at Annapolis Junction. You will leverage secure remote access solutions and encrypted communications to protect classified data at all times.
• • Engage with cutting-edge AI/ML initiatives. You will prototype Python modules that apply supervised learning to labeled network data, accelerating the discovery of novel attack vectors and reducing analyst workload.
• • Influence product roadmap priorities by translating mission feedback into technical epics. Your insights will shape investment decisions, ensuring the platform evolves to counter emerging cyber threats and mission requirements.