cFocus Software Incorporated

AOUSC - Detection Engineering Lead

cFocus Software Incorporated • $120K — $150K *
Washington, DC 20011In-Person
Information Technology
5 - 7 years of experience
Today
Be an Early Applicant
Job Overview by Ladders

Qualifications

  • Active Public Trust clearance required for role
  • Bachelor's degree in Computer Science, Information Technology, or related field
  • 5+ years of Incident Response experience in a large Security Operations Center (SOC) with 3 years in proactive detection engineering
  • Proficiency in hypothesis formation and querying large datasets to identify Advanced Persistent Threat (APT) behavior for 3+ years
  • Experience with scripting languages (Python, PowerShell) for tool development for 2+ years
  • Expertise in developing detections using SIEM tools like Splunk ES or Microsoft Sentinel for 2+ years
  • Active Offensive Security Certified Professional (OSCP) or GIAC Exploit Researcher and Advanced Penetration Tester (GXPN) certification preferred

Responsibilities

  • Lead detection engineering operations for the AOUSC Security Operations Division
  • Support full lifecycle for cybersecurity detection activities including research, testing, and deployment
  • Research cyber threats and attack methodologies to enhance detection coverage
  • Develop and deploy new SIEM detection signatures and rules to improve incident response
  • Analyze false positives and coordinate necessary tuning and whitelisting
  • Prepare weekly operational reports summarizing security events and detection improvements
  • Collaborate with different cybersecurity teams to implement intelligence-driven detections
  • Conduct validation and impact assessments of new alerts from security devices

Benefits

  • Hybrid work environment with onsite location in Washington, DC
  • Engagement with a mission-driven organization supporting the Judiciary
  • Opportunities for professional development and skill enhancement
  • Collaboration with experienced cybersecurity teams
  • Impactful contributions to national security and public trust mandates
Full Job Description
cFocus Software seeks a Detection Engineering Lead to join our program supporting the Administrative Office of the United States Courts (AOUSC). This position is Hybrid with the onsite location being in Washington, DC. This position requires a Public Trust clearance.
Qualifications:
  • Active Public Trust clearance
  • B.S. Computer Science, Information Technology, or a related field
  • 5+ years within IR in a large SOC (over 5,000 endpoints) with at least 3 years focused on proactive detection engineering, threat hunt, or adversary emulation.
  • 3+ years of experience with demonstrated proficiency in forming hypothesis, querying large datasets and identifying APT behavior.
  • 2+ years' experience with demonstrated proficiency in scripting languages including Python and PowerShell to develop new tools.
  • 2+ years' experience with demonstrated proficiency developing detections in a SIEM (utilizing Splunk ES or Microsoft Sentinel).
  • This role most closely aligns with the NICE work role PD-WRL-006 (Threat Analysis).
  • Active OSCP or GXPN certification

Duties:
  • Lead Detection Engineering operations supporting AOUSC Security Operations Division (SOD) mission objectives and defensive cybersecurity operations.
  • Provide full lifecycle support for cybersecurity detection engineering activities, including research, testing, implementation, tuning, deployment, and maintenance of detection capabilities.
  • Research emerging cyber threats, adversary capabilities, attack methodologies, and Tactics, Techniques, and Procedures (TTPs) to improve detection coverage and SOC visibility.
  • Develop, test, validate, and deploy new SIEM detection signatures, analytics, rules, and workflows to enhance threat detection capabilities and minimize analyst burden.
  • Maintain and manage the Risk Based Alerting (RBA) framework within the Judiciary SIEM environment to ensure effective detection of risky or malicious activity.
  • Coordinate weekly meetings with SOC analysts and stakeholders to review alert performance, analyst feedback, false positives, and detection tuning requirements.
  • Analyze all false positive alerts to determine necessary tuning, whitelisting, suppression logic, and gaps in security monitoring or analytics.
  • Develop and maintain detailed documentation for all detection engineering changes, configuration updates, rule logic, workflows, and implementation procedures.
  • Coordinate with Threat Hunting, Cyber Threat Intelligence (CTI), Cybersecurity Triage, Incident Response, and Blue Team personnel to operationalize intelligence-driven detections.
  • Develop new alerts and detections in response to emerging cybersecurity threats, active vulnerabilities, malicious campaigns, and government-directed priorities.
  • Ensure critical vulnerability-related detections are deployed within required service level timelines, including 24-hour implementation for critical severity alerts.
  • Conduct analysis and validation of new alerts from security devices and external telemetry sources to determine operational impact, detection value, and analyst workflow considerations.
  • Track all detection engineering changes, modifications, additions, and removals through Jira stories and established Agile workflows.
  • Develop weekly operational reports summarizing security events, alert dispositions, workforce metrics, tuning activities, detection improvements, and outstanding issues.
  • Document and maintain all detection framework changes within configuration files, knowledge management portals, and operational repositories.
  • Support development and implementation of detection engineering execution plans aligned to AOUSC operational priorities, organizational risks, and emerging threat vectors.
  • Provide recommendations for improving telemetry collection, log visibility, event correlation, and security monitoring effectiveness across Judiciary systems and cloud environments.
  • Collaborate with Blue Team personnel to improve detection coverage associated with Red Team findings, adversary emulation, and cyber exercises.
  • Prepare and deliver technical briefings, operational status reports, executive summaries, and stakeholder presentations.
  • Support transition-in, transition-out, operational readiness, and knowledge transfer activities in accordance with AOUSC requirements.

About cFocus Software Incorporated

Established in 2006, cFocus Software has provided IT services to Federal Government agencies for over 10 years. And they’re just getting started! Follow us as they continue to innovate and serve their federal government customers.

cFocus Software Incorporated Careers

Joining cFocus Software Incorporated presents an unparalleled opportunity to become part of a leading team of professionals dedicated to pioneering innovations in the technology sector. As a company renowned for its commitment to excellence and growth, cFocus Software Incorporated offers a range of job opportunities designed to empower career advancement and professional development.

Explore Career Opportunities

cFocus Software Incorporated is actively hiring and offers a variety of positions that cater to a range of skills and experiences. Whether you're looking for an entry-level role or a senior leadership position, cFocus Software Incorporated provides a platform to enhance your career. Explore open positions that align with your professional interests and expertise.

Innovative Work Environment

cFocus Software Incorporated is committed to innovation and leadership in the technology industry. The company encourages a culture of creativity and problem-solving, where each team member’s contribution is valued. Professionals at cFocus Software Incorporated work on cutting-edge projects that push the boundaries of technology and have a lasting impact on clients and communities.

Professional Growth and Development

cFocus Software Incorporated believes in nurturing the growth of its employees through comprehensive professional development and diversity training programs. These initiatives ensure that every team member has the tools and knowledge necessary to succeed. Employees are encouraged to take on challenging projects that foster personal and professional growth.

Internship Programs

For those starting their careers, cFocus Software Incorporated offers internship programs that provide a robust foundation in technology and business practices. Interns gain hands-on experience, working alongside seasoned professionals and participating in projects that offer real-world applications and outcomes.

Benefits and Culture

cFocus Software Incorporated is dedicated to supporting its employees with a competitive array of benefits. The company prioritizes work-life balance, health, and well-being, ensuring that the team can perform at its best. cFocus Software Incorporated's inclusive culture promotes diversity and equal opportunity, making it a great place to work for individuals from all backgrounds.

Networking and Leadership Opportunities

Employees at cFocus Software Incorporated have numerous opportunities to engage in networking and leadership activities. These opportunities allow for career advancement and the development of new skills through interaction with industry leaders and peers.

Applying for a Position

To apply for a position at cFocus Software Incorporated, candidates should prepare their resume to highlight relevant experience and skills. The interview process is designed to assess fit both for the role and the company culture. cFocus Software Incorporated seeks passionate, curious, and innovative team players who are ready to drive change.

Stay Connected with cFocus Software Incorporated Careers

Keep up to date with the latest from cFocus Software Incorporated by following the careers blog. Gain insights from industry leaders and get tips on everything from crafting your resume to acing your next interview.

Join the cFocus Software Incorporated Team

Search for job opportunities and find the position that matches your skills and passions. With cFocus Software Incorporated, embark on a rewarding career path filled with excellent benefits, a supportive culture, and endless opportunities for growth.

SEARCH cFOCUS SOFTWARE JOBS

READ CAREERS BLOG

Job Alert Emails

Personalize your subscription to receive job alerts, latest news, and insider tips tailored to your preferences. Discover the exciting and rewarding opportunities that await at cFocus Software Incorporated.
Learn more about cFocus Software Incorporated
Size
11 employees
Industry
Information Technology
* Ladders Estimates

Similar Jobs

Ad banner background

Get Ready For Your
Next Interview

More Jobs at cFocus Software Incorporated

More Information Technology Jobs

Find similar AOUSC - Detection Engineering Lead jobs:

NationwideWashington, DC