AOUSC - Detection Engineering Lead
Full-time
cFocus Software Incorporated
cFocus Software seeks a Detection Engineering Lead to join our program supporting the Administrative Office of the United States Courts (AOUSC). This position is Hybrid with the onsite location being in Washington, DC. This position requires a Public Trust clearance.
Qualifications:
Qualifications:
- Active Public Trust clearance
- B.S. Computer Science, Information Technology, or a related field
- 5+ years within IR in a large SOC (over 5,000 endpoints) with at least 3 years focused on proactive detection engineering, threat hunt, or adversary emulation.
- 3+ years of experience with demonstrated proficiency in forming hypothesis, querying large datasets and identifying APT behavior.
- 2+ years’ experience with demonstrated proficiency in scripting languages including Python and PowerShell to develop new tools.
- 2+ years’ experience with demonstrated proficiency developing detections in a SIEM (utilizing Splunk ES or Microsoft Sentinel).
- This role most closely aligns with the NICE work role PD-WRL-006 (Threat Analysis).
- Active OSCP or GXPN certification
- Lead Detection Engineering operations supporting AOUSC Security Operations Division (SOD) mission objectives and defensive cybersecurity operations.
- Provide full lifecycle support for cybersecurity detection engineering activities, including research, testing, implementation, tuning, deployment, and maintenance of detection capabilities.
- Research emerging cyber threats, adversary capabilities, attack methodologies, and Tactics, Techniques, and Procedures (TTPs) to improve detection coverage and SOC visibility.
- Develop, test, validate, and deploy new SIEM detection signatures, analytics, rules, and workflows to enhance threat detection capabilities and minimize analyst burden.
- Maintain and manage the Risk Based Alerting (RBA) framework within the Judiciary SIEM environment to ensure effective detection of risky or malicious activity.
- Coordinate weekly meetings with SOC analysts and stakeholders to review alert performance, analyst feedback, false positives, and detection tuning requirements.
- Analyze all false positive alerts to determine necessary tuning, whitelisting, suppression logic, and gaps in security monitoring or analytics.
- Develop and maintain detailed documentation for all detection engineering changes, configuration updates, rule logic, workflows, and implementation procedures.
- Coordinate with Threat Hunting, Cyber Threat Intelligence (CTI), Cybersecurity Triage, Incident Response, and Blue Team personnel to operationalize intelligence-driven detections.
- Develop new alerts and detections in response to emerging cybersecurity threats, active vulnerabilities, malicious campaigns, and government-directed priorities.
- Ensure critical vulnerability-related detections are deployed within required service level timelines, including 24-hour implementation for critical severity alerts.
- Conduct analysis and validation of new alerts from security devices and external telemetry sources to determine operational impact, detection value, and analyst workflow considerations.
- Track all detection engineering changes, modifications, additions, and removals through Jira stories and established Agile workflows.
- Develop weekly operational reports summarizing security events, alert dispositions, workforce metrics, tuning activities, detection improvements, and outstanding issues.
- Document and maintain all detection framework changes within configuration files, knowledge management portals, and operational repositories.
- Support development and implementation of detection engineering execution plans aligned to AOUSC operational priorities, organizational risks, and emerging threat vectors.
- Provide recommendations for improving telemetry collection, log visibility, event correlation, and security monitoring effectiveness across Judiciary systems and cloud environments.
- Collaborate with Blue Team personnel to improve detection coverage associated with Red Team findings, adversary emulation, and cyber exercises.
- Prepare and deliver technical briefings, operational status reports, executive summaries, and stakeholder presentations.
- Support transition-in, transition-out, operational readiness, and knowledge transfer activities in accordance with AOUSC requirements.
Vacancy posted 1 day ago
Similar jobs that could be interesting for youBased on the AOUSC - Detection Engineering Lead in Washington DC vacancy
$135k - $216k
Systems Engineering User Endpoint Management Lead Job Locations: US-VA-Reston | US-VA-Herndon | US-DC-Washington Requisition ID: 2026-167315 Position... ...solutions, including antivirus, firewalls, intrusion detection/prevention systems, and data loss prevention (DLP) tools...SuggestedContract workShift work- Data validation logic Modular data engineering frameworks Data accuracy metrics Integrate... ...Position Overview The Data Engineering Lead is responsible for designing and implementing... ...Pipeline health indicators Variance detection summaries Enable transparency into data...SuggestedContract workTemporary workFlexible hours
- RiVidium Inc is seeking a Vulnerability Engineering Specialist to support the MODES III team, focusing on military community and family policy. This role requires analyzing vulnerabilities, coordinating corrective actions, and maintaining a disciplined remediation process...Suggested
- RiVidium, Inc. is seeking a Vulnerability Engineering Lead to drive remediation efforts, oversee secure operations, and coordinate with engineering and security teams. The role involves reporting findings, prioritizing remediation, and ensuring visibility for customers...SuggestedWork at office
$65k - $85k
AASHTO (The American Association of State Highway and Transportation Officials) is hiring an Associate Program Manager for Engineering in Washington, DC. This full-time role involves supporting program administration and implementation, coordinating meetings, and assisting...SuggestedFull time- Senior Full‑Stack Development Lead Entarian seeks an experienced Senior Full‑Stack Development Lead to guide Agile software development... ...capabilities, with the ability to coach junior and mid‑level engineers across multiple technology stacks. Ability to translate...
$130k - $200k
...3101 Wilson Blv Compensation: USD 130,000 - USD 200,000 - yearly Job Description AECOM is seeking a Civil Engineer to fill a Civil Engineering Discipline Lead / Project Manager position. In this role, the person will support our growing transportation business in northern...Work at officeRelocation packageFlexible hours$135.88k - $226.46k
Job Summary The MECM Engineering Lead is a senior technical and managerial role focused on leading the ongoing operations and management of a Microsoft Endpoint Configuration Manager (MECM) environment in a complex federal government environment. The MECM Engineering Lead...Temporary workFlexible hours- The Endpoint Engineering Lead provides senior technical leadership for the design, deployment, and lifecycle management of enterprise endpoints, with a primary focus on reducing laptop rollout issues, improving deployment predictability, and strengthening endpoint stability...Work at office
- Description RiVidium is seeking a Vulnerability Engineering Lead to support our planned MODES III team supporting Military Community and Family Policy (MC&FP). This role supports IT, Cybersecurity, and Data Operations - Core Operations and helps deliver mission-focused...Contract work
- ProSidian Consulting, LLC is seeking an Engineering Compliance Manager to provide advisory services aligned with regulatory compliance in the Energy Industry. The role involves ensuring engineering reviews align with loan agreements while serving as a senior consultant...
$151.7k - $227.6k
...our team to deliver transformational projects that will benefit future generations. Grow with us, H2O+U. Your Opportunity The Engineering Lead, Capital Improvements Program provides program leadership responsible for the overarching delivery and technical quality of...Full timeContract workTemporary workPart timeFor contractorsCasual workLocal areaFlexible hours- Government Technical Services Corporation is seeking an Endpoint Service Desk Engineering Lead in Washington, United States. This is not a Tier 1 help desk role, focusing on engineering, automation, and enterprise endpoint management across Windows and macOS environments...Remote job
$112k - $179k
Peraton is seeking a Lead LAN/WAN Engineer in Washington, DC, to provide expert design and operational support for complex networking challenges. The successful candidate will lead local and wide-area networking, serving as a technical expert and consultant. The role requires...Local area$135.88k - $226.46k
NTT DATA North America is seeking a MECM Engineering Lead responsible for managing Microsoft Endpoint Configuration Manager in a federal government environment. This senior role includes leading software deployments and ensuring security and scalability of endpoint management...- A leading engineering firm is seeking a Transit Engineering Leader to provide technical and programmatic leadership in the Mid-Atlantic region. This role involves managing transit engineering contracts, guiding program growth, and mentoring junior staff. The ideal candidate...
$148.8k - $306.5k
...Job Description The Systems Engineering Lead will conduct comprehensive systems engineering activities to support the client platform. Translate customer requirements into detailed system designs, develop and analyze system alternatives to recommend optimal solutions,...Local areaAccenture
Arlington, VA1 hour ago- HDR, Inc. is seeking a Project Manager Engineering for the Aerospace sector in the Mid-Atlantic region. You will lead multi-disciplinary teams through the full project lifecycle, aligning scope, budget, and schedule with client goals. The role requires a Bachelor's in...
$116.9k - $243.1k
Overview We are seeking a hands‑on Security Engineering Lead to manage the engineering and sustenance of CBP SOC’s security infrastructure. This role involves leading a team responsible for the full lifecycle management of security tools and applications across on‑premise...Live inWork at officeLocal area- Title Vulnerability Engineering Lead Full-Time/Part-Time Full-Time Description Key Responsibilities Lead vulnerability or remediation activities supporting secure operations and continuous monitoring. Guide prioritization, coordination, and reporting of findings and...Full timePart time
- True Zero Technologies is seeking a Senior Cybersecurity Engineer located in Arlington, Virginia. This role will lead cybersecurity engineering efforts, implement security controls, and support federal security requirements. Required qualifications include a Bachelor’s...
- Rividium Inc is seeking a Vulnerability Engineering Lead to support the Military Community and Family Policy team in Alexandria, Virginia. This role focuses on IT, Cybersecurity, and Data Operations, ensuring mission-focused outcomes for service members and families. The...
- Inovalon, Inc. is seeking a Senior Manager, Software Engineering in Bowie, MD. This role involves managing teams to develop various technology projects and enhancing the Risk Adjustment software solutions. The ideal candidate should have a Master’s in Computer Science and...Remote job
- POSITION DESCRIPTION Pioneering Evolution is seeking an Engineering Lead / Principal Architect to provide combined technical leadership and senior architectural direction for a mission-critical modular enterprise platform and related modernization initiatives. This role...Temporary work
- Acuity, Inc. in Washington, DC is seeking an Engineering Manager to lead a successful team in delivering IT solutions to federal agencies. With over 10 years of experience and deep expertise in Agile methodologies, you will oversee project timelines, resource allocation...
$116.9k - $243.1k
...to drive positive, lasting change that moves missions and the government forward! Overview We are seeking a hands‑on Security Engineering Lead to manage the engineering and sustainment of CBP SOC's security infrastructure. This role involves leading a team responsible...Live inWork at officeLocal area$110k - $130k
Company Overview Development InfoStructure LLC., (Devis) is a leading provider of innovative software development, management, and consulting... ...the public sector. Job Overview The Security Architecture / Engineering Lead serves as the technical leader for the enterprise...Full timeFor contractorsWork at officeMonday to Friday- ECS is seeking a Senior Information Systems Security Engineer in Washington, D.C., to support a crucial federal cybersecurity program. This role involves leading the Security Assessment and Authorization program and working on various risk management activities. The ideal...
- ...Overview Accenture is a leading global professional services company that helps the world’s leading businesses, governments and other... ...Our Team: QuantAI sits between quantitative research, agentic engineering, product delivery, and client-facing transformation inside...
Accenture
Arlington, VA2 days ago - ...the OUSD. This position is Pentagon, DC. Oversees the Systems Engineering staff and activities of an organization's information systems.... ...Eight (8) years of experience as a supervisor or team or project lead, and a minimum of two (2) years' experience working in the DoW....Contract workFlexible hours
Do you want to receive more vacancies?
Subscribe and receive similar vacancies to AOUSC - Detection Engineering Lead. Be the first to apply!
