AOUSC - Detection Engineering Lead
Full-time
cFocus Software Incorporated
cFocus Software seeks a Detection Engineering Lead to join our program supporting the Administrative Office of the United States Courts (AOUSC). This position is Hybrid with the onsite location being in Washington, DC. This position requires a Public Trust clearance.
Qualifications:
Qualifications:
- Active Public Trust clearance
- B.S. Computer Science, Information Technology, or a related field
- 5+ years within IR in a large SOC (over 5,000 endpoints) with at least 3 years focused on proactive detection engineering, threat hunt, or adversary emulation.
- 3+ years of experience with demonstrated proficiency in forming hypothesis, querying large datasets and identifying APT behavior.
- 2+ years’ experience with demonstrated proficiency in scripting languages including Python and PowerShell to develop new tools.
- 2+ years’ experience with demonstrated proficiency developing detections in a SIEM (utilizing Splunk ES or Microsoft Sentinel).
- This role most closely aligns with the NICE work role PD-WRL-006 (Threat Analysis).
- Active OSCP or GXPN certification
- Lead Detection Engineering operations supporting AOUSC Security Operations Division (SOD) mission objectives and defensive cybersecurity operations.
- Provide full lifecycle support for cybersecurity detection engineering activities, including research, testing, implementation, tuning, deployment, and maintenance of detection capabilities.
- Research emerging cyber threats, adversary capabilities, attack methodologies, and Tactics, Techniques, and Procedures (TTPs) to improve detection coverage and SOC visibility.
- Develop, test, validate, and deploy new SIEM detection signatures, analytics, rules, and workflows to enhance threat detection capabilities and minimize analyst burden.
- Maintain and manage the Risk Based Alerting (RBA) framework within the Judiciary SIEM environment to ensure effective detection of risky or malicious activity.
- Coordinate weekly meetings with SOC analysts and stakeholders to review alert performance, analyst feedback, false positives, and detection tuning requirements.
- Analyze all false positive alerts to determine necessary tuning, whitelisting, suppression logic, and gaps in security monitoring or analytics.
- Develop and maintain detailed documentation for all detection engineering changes, configuration updates, rule logic, workflows, and implementation procedures.
- Coordinate with Threat Hunting, Cyber Threat Intelligence (CTI), Cybersecurity Triage, Incident Response, and Blue Team personnel to operationalize intelligence-driven detections.
- Develop new alerts and detections in response to emerging cybersecurity threats, active vulnerabilities, malicious campaigns, and government-directed priorities.
- Ensure critical vulnerability-related detections are deployed within required service level timelines, including 24-hour implementation for critical severity alerts.
- Conduct analysis and validation of new alerts from security devices and external telemetry sources to determine operational impact, detection value, and analyst workflow considerations.
- Track all detection engineering changes, modifications, additions, and removals through Jira stories and established Agile workflows.
- Develop weekly operational reports summarizing security events, alert dispositions, workforce metrics, tuning activities, detection improvements, and outstanding issues.
- Document and maintain all detection framework changes within configuration files, knowledge management portals, and operational repositories.
- Support development and implementation of detection engineering execution plans aligned to AOUSC operational priorities, organizational risks, and emerging threat vectors.
- Provide recommendations for improving telemetry collection, log visibility, event correlation, and security monitoring effectiveness across Judiciary systems and cloud environments.
- Collaborate with Blue Team personnel to improve detection coverage associated with Red Team findings, adversary emulation, and cyber exercises.
- Prepare and deliver technical briefings, operational status reports, executive summaries, and stakeholder presentations.
- Support transition-in, transition-out, operational readiness, and knowledge transfer activities in accordance with AOUSC requirements.
Vacancy posted 21 days ago
Similar jobs that could be interesting for youBased on the AOUSC - Detection Engineering Lead in Washington DC vacancy
$103.8k - $218.1k
Job Title: Network Engineering Lead Job Category: Information Technology Time Type: Full time Minimum Clearance Required to Start: None Employee Type: Regular Percentage of Travel Required: None Type of Travel: None * * * The Opportunity: CACI is seeking a Network...SuggestedFull timeContract workWork experience placementFlexible hours- ...Job Title: Software Engineer - SME Level (Sustainment Engineering Lead) Location: Arlington, VA Clearance: Secret Type: Full-time, W2 About VivSoft: VivSoft is a mission-driven technology company specializing in Cloud, DevSecOps, Artificial Intelligence...SuggestedFull timeRemote workFlexible hours
- ...Overview Accenture is a leading global professional services company that helps the world’s leading businesses, governments and other... ...Our Team: QuantAI sits between quantitative research, agentic engineering, product delivery, and client-facing transformation inside...Suggested
$116.9k - $243.1k
...sustainment effort within Oracle Cloud Infrastructure (OCI). This role leads the operational management and optimization of the cloud-... ...& Collaboration * Lead and coordinate a team of cloud engineers, system administrators, database administrators, application administrators...SuggestedFull timeLive inWork at officeLocal area$92.3k - $166.85k
...customers to succeed in their critical missions. We believe in leading with integrity, investing in our communities, and building sustainably... ...innovation that directly impacts national security. Ready to engineer solutions that matter? The Cloud Operations Manager plays a...SuggestedFull timeContract work$200k - $300k
...pioneers of market-changing solutions.We are currently seeking an Engineering Manager or a Senior Engineering Manager who is passionate about... ...based on qualifications and experience.Responsibilities :Lead, coach and grow a passionate team of 5-10 software engineers.In...Local area$122.7k - $317.2k
...strategies that shape markets, disrupt incumbents, and unlock new growth engines. If you want to work where strategy is anything but theoretical,... ...the AI revolution — you are actively shaping how your clients lead it. You thrive in ambiguity, energize the teams around you, and...Live inWork at officeLocal area- ...A fast scaling startup in the Washington, DC area is searching for an Engineering Manager to join their growing company. The build a developer tool used by some of the biggest names in tech and is helping them ship with faster velocity. The are looking for experience managing...
- ...Position Overview The Cloud Manager will lead the execution of modernization initiatives supporting the U.S. Census Bureau's... ...sprint-level execution across: Cloud Architecture Cloud Engineering Data Engineering Application Development (Python) Testing...Temporary workFor contractorsWork at officeFlexible hoursShift work
- ...Description Job Description Position Overview The Data Engineering Lead is responsible for designing and implementing modern,... ...accuracy metrics Pipeline health indicators Variance detection summaries Enable transparency into data transformation impacts...Contract workTemporary workFlexible hours
- ...Description Description TeleSolv Consulting has a great opportunity for you to work with the Federal Government as a Civil Engineering Lead. This position is an on-site position in Washington, D.C. The Civil Engineering Lead provides subject matter expertise...
$100k - $200k
...resiliency, contact center operations, information technology, software engineering, program management, strategic communications, engineering, and... ...Overview Pantheon Data is seeking a Civil Engineering Lead to provide technical leadership and strategic guidance in...For contractorsWork at officeLocal areaRemote work- ...rockITdata is a unique SDVOSB services company that partners with leading commercial healthcare/life sciences organizations on cutting... ...the American taxpayer and consumer. Join rockITdata as the Engineering & GovCloud Lead supporting one of the nation's largest federal...Full timeLocal area
- ...Job Description Job Description Job Title: Fintech Engineering Lead Location: San Francisco, CA Visa Status: US Citizens and Green Card Holders Skills: Python, Redis, PostgreSQL, Go (Golang), AWS, Rust, FastAPI The Role We're seeking a Fintech...Flexible hours
- ...leveraging your accounting and technical skills. You will be responsible for ensuring effective system architecture solutions and leading team engagements. With a strong focus on collaboration, you'll thrive in this role if you have relevant experience, excellent communication...
- ...hours of a cyber incident—helping protect America's digital infrastructure when it matters most. The Cloud Operations Manager will lead the end-to-end management of cloud engagement kits, ensuring rapid deployment, maintenance, and retirement of cloud-based...
$146k - $244k
...Job Description Overview We are seeking a Civil Engineering Lead Energy - Remote. This remote position is based out of our Richland, WA office. Your role Serves as the recognized expert on civil engineering design for nuclear facilities within AtkinsRéalis...Full timeTemporary workWork at officeRemote workFlexible hours$90k - $100k
...integration of new technologies into IRUSA’s IT environment.* Lead the development of short- and long-term IT plans to ensure infrastructure... ...security infrastructure, including firewalls, intrusion detection systems, anti-virus software, and other security tools.*...Temporary workFor contractorsRemote work- ...Job Description Job Description Role: ITDI Cyber Engineering Lead Location: Washington, D.C. - some travel may be anticipated Clearance required: Public Trust Roles and Responsibilities: The Cybersecurity Engineering Lead will directly support the...Local area
$155k - $410k
...knowledge, and experiences you need to lead and deliver value at this level include... ...Preferred Fields of Study Computer Engineering,Computer Applications,Computer Programming... ...AI to improve delivery efficiency, risk detection, and decision-making Represent the firm...Temporary workH1b$180k
...Our client – a global and growing BioPharma CDMO company needs an Engineering Supervisor - Line Lead with Pharmaceutical Industry experience at their expanding plant in WA state, Excellent total comp. up to $180K+ with excellent Benefits + Relocation Package...Permanent employmentContract workH1bLocal areaRelocationRelocation packageNight shift- ...Job Description Job Description GTSC and its Datawiz business unit seeks an Endpoint Service Desk Engineering Lead . ~~~ This position is pending task order award. ~~~ Clearance Requirement ~ Active Top Secret (TS) security clearance Location : This...Temporary workLocal areaRemote workFlexible hours
- A leading aerospace and defense company is looking for an experienced engineering leader to manage its Data Engineering team. This role involves defining and maintaining a roadmap, driving data pipelines in Databricks, and mentoring engineers. The ideal candidate will have...Remote work
$142.6k - $261.5k
...Anywhere in Country The opportunity You’ll lead ServiceNow Transformation teams in a... ...including AIOps, event correlation, anomaly detection, service health, and automated... ...Science, Information Systems Management, Engineering or similar discipline Typically, no less...Summer holidayFlexible hours$142.6k - $261.5k
...ServiceNow Consulting Manager at EY, you will lead ServiceNow Transformation teams,... ...including AIOps, event correlation, anomaly detection, and automated remediation. Support pre... ..., Information Systems Management, Engineering, or a related discipline. 4-6 years of...Flexible hours- ...with delivers deep cloud traffic observability across applications, services, offices, and users, helping teams monitor performance, detect threats, and ensure QoE for critical applications. With policy-driven control and QoE-based rightsizing, their Enterprise clients...
- ...Operations Engineering Lead Location: [Insert Location] Start Date: 10 July 2026 Job Description: As the Operations Engineering Lead, you will be responsible for overseeing the technical operations of the engineering team and ensuring the successful delivery...Full time
$88.2k - $190.9k
Operations Engineering Lead, SME TS Clearance REQUIRED Position Description CGI Federal has an exciting opportunity for an Operations Engineering Lead within our Intel sector advancing the national security mission through cutting edge technology. You must have...Local area- ...Description Job Description Description About The Role: Innovative Defense Technologies (IDT), a leading defense technology company, is seeking a Engineering Technical/Program Lead to be part of our Advanced Capabilities team and based out of our Arlington, VA...Full timeWork at officeImmediate start
$168k - $217k
...team? About the role Koalafi is seeking a hands-on Software Engineering Manager for the Consumer Team to drive the technical direction... ...while continuing to code and mentor others. What you'll do Lead and deliver: Define and execute the technical roadmap for...Work at officeRemote workFlexible hours
Do you want to receive more vacancies?
Subscribe and receive similar vacancies to AOUSC - Detection Engineering Lead. Be the first to apply!


