Job Description

I. DESCRIPTION OF SERVICES


Texas Health and Human Services Commission requires the services of 3 Software Developer 3, hereafter referred to as Candidate(s), who meets the general qualifications of Software Developer 3, Applications/Software Development and the specifications outlined in this document for the Texas Health and Human Services Commission.

All work products resulting from the project shall be considered "works made for hire" and are the property of the Texas Health and Human Services Commission and may include pre-selection requirements that potential Vendors (and their Candidates) submit to and satisfy criminal background checks as authorized by Texas law. Texas Health and Human Services Commission will pay no fees for interviews or discussions, which occur during the process of selecting a Candidate(s).

Level Description

8 or more years of experience, relies on experience and judgment to plan and accomplish goals, independently performs a variety of complicated tasks, may lead and direct the work of others, a wide degree of creativity and latitude is expected.



Job Description

Researching, designing, implementing and managing software programs. Testing and evaluating new programs. Working closely with other developers, UX designers, business and systems analysts.



Additional job details and special considerations

HHSC ITSAC – Software Developer III

(Cybersecurity Engineering – Penetration Testing & SIEM Integration)

Position Summary

The Software Developer III will serve within the HHSC Chief Information Security Office (CISO) to design, develop, and support cybersecurity engineering solutions that enhance penetration testing capabilities, security automation, and Security Information and Event Management (SIEM) integrations. This role will focus on building secure APIs, automation scripts, and tool integrations that enable scalable security testing, continuous monitoring, and data-driven threat detection across HHSC environments.

The position requires strong software development expertise combined with hands-on cybersecurity engineering skills, including Kali Linux server deployment, penetration testing toolchain support, SIEM data ingestion, and security automation scripting.

This role directly supports HHSC’s Zero Trust, continuous monitoring, and security operations modernization initiatives.

Primary Responsibilities

Security Engineering & Development

• Design and develop secure software components, APIs, and microservices to support penetration testing workflows and security automation.

• Build custom integrations between penetration testing platforms, vulnerability scanning tools, and enterprise SIEM platforms.

• Develop data ingestion pipelines to normalize and forward security telemetry into Splunk and other SIEM platforms.

• Create automation scripts to orchestrate security testing, evidence collection, and reporting processes.

• Support integration of security testing results into governance, risk, and compliance (GRC) platforms.

Penetration Testing Enablement

• Build and maintain Kali Linux-based penetration testing infrastructure, including virtualized and cloud-hosted environments.

• Configure and manage penetration testing toolchains, frameworks, and supporting services.

• Develop custom exploit scripts, test harnesses, and proof-of-concept code to validate security findings.

• Support red team and application penetration testing engagements through automation and tool development.

SIEM & Security Operations Integration

• Develop APIs and connectors to integrate security tools with enterprise SIEM platforms.

• Implement log parsing, enrichment, and normalization logic to improve detection fidelity.

• Automate alert enrichment, correlation, and reporting workflows.

• Collaborate with CSOC teams to align development efforts with detection and monitoring requirements.

Scripting & Automation

• Develop scripts using Python, PowerShell, Bash, or similar languages to automate security operations and testing processes.

• Implement CI/CD pipelines for security tooling and integration code.

• Maintain version control repositories and documentation for developed solutions.

Security & Compliance Alignment

• Ensure developed solutions comply with HHSC security standards, DIR security control requirements, and NIST-based frameworks.

• Participate in architecture reviews, risk assessments, and technical design sessions.

• Produce technical documentation, configuration guides, and operational runbooks.



Required Qualifications – Software Developer III

• Bachelor’s degree in Computer Science, Information Technology, or related field (or equivalent experience).

• 3–5 years of professional software development experience.

• Proficiency in one or more programming languages: Python, Java, JavaScript, or C#.

• Experience developing REST APIs and integrating enterprise platforms.

• Hands-on scripting experience (Python, Bash, PowerShell).

• Experience deploying and administering Linux systems.

• Familiarity with SIEM platforms (Splunk, Sentinel, or equivalent).

• Knowledge of cybersecurity fundamentals and secure coding practices.



Additional Qualifications – Software Developer III

• 5–8 years of professional software development experience.

• Advanced experience building security automation and platform integrations.

• Hands-on experience with penetration testing tools and Kali Linux environments.

• Experience developing security data pipelines and SIEM integrations.

• Experience with containerization and virtualization (Docker, VMware, cloud-hosted labs).

• Ability to design scalable and resilient security tool architectures.

• Experience working in regulated or government environments preferred.



Preferred Certifications

• OSCP, CEH, or equivalent penetration testing certification.

• Splunk Certified Developer or SIEM integration experience.

• Security+, CISSP, or equivalent security certification.

• Linux administration certification.



Key Competencies

• Secure software development

• API and systems integration

• Security automation and orchestration

• Penetration testing toolchain engineering

• SIEM and log pipeline development

• Linux server administration

• Technical documentation and collaboration



Engagement Type

• ITSAC Contract Resource

• Works under HHSC Office of the CISO

• Supports enterprise cybersecurity modernization initiatives



Business Value to HHSC

This role enables HHSC to:

• Scale penetration testing operations through automation

• Integrate security testing outputs into continuous monitoring

• Strengthen threat detection through enriched SIEM telemetry

• Reduce manual security operations effort

• Support Zero Trust and continuous compliance objectives




II. CANDIDATE SKILLS AND QUALIFICATIONS

Minimum Requirements:
Candidates that do not meet or exceed the minimum stated requirements (skills/experience) will be displayed to customers but may not be chosen for this opportunity.

Years	Required/Preferred	Experience
8	Required	Advanced experience building security automation and platform integrations.
8	Required	Hands-on experience with penetration testing tools and Kali Linux environments.
8	Required	PLEASE CHECK THE JOB DESCRIPTION FOR ADDITIONAL REQUIRED SKILLS AND EXPERIENCE
3	Preferred	Proficiency in one or more programming languages: Python, Java, JavaScript, or C#.
3	Preferred	Experience developing REST APIs and integrating enterprise platforms.
3	Preferred	Experience developing security data pipelines and SIEM integrations.
3	Preferred	Ability to design scalable and resilient security tool architectures.
3	Preferred	PLEASE CHECK THE JOB DESCRIPTION FOR ADDITIONAL REQUIRED SKILLS AND EXPERIENCE

III. TERMS OF SERVICE

Services are expected to start 03/23/2026 and are expected to complete by 08/31/2026. Total estimated hours per Candidate shall not exceed 1167 hours. This service may be amended, renewed, and/or extended providing both parties agree to do so in writing.

IV. WORK HOURS AND LOCATION

Services shall be provided during normal business hours unless otherwise coordinated through the Texas Health and Human Services Commission. Normal business hours are Monday through Friday from 8:00 AM to 5:00 PM, excluding State holidays when the agency is closed.

The primary work location(s) will be at 701 West 51st Street, Austin, TX 78751. The working position is On Site. Any and all travel, per diem, parking, and/or living expenses shall be at the Candidate's and/or Vendor's expense. Texas Health and Human Services Commission will provide pre-approved, written authorization for travel for any services to be performed away from the primary work location(s). Pre-approved travel expenses are limited to the rates and comply with the rules prescribed by the State of Texas for travel by its classified employees, including any requirement for original receipts.

The Candidate(s) may be required to work outside the normal business hours on weekends, evenings and holidays, as requested. Payment for work over 40 hours will be at the hourly rate quoted and must be coordinated and pre-approved through Texas Health and Human Services Commission.

V. OTHER SPECIAL REQUIREMENTS

The position is ONSITE at the location listed above (NO REMOTE WORK). The program will only accept LOCAL ONLY candidates for this position.

The program will only allow candidates who are LOCAL TO THE AUSTIN AREA ONLY