AOUSC - Threat Hunt Lead
Full-time
cFocus Software Incorporated
cFocus Software seeks a Threat Hunt Lead to join our program supporting the Administrative Office of the United States Courts (AOUSC). This position is Hybrid with the onsite location being in Washington, DC. This position requires a Public Trust clearance.
Qualifications:
Qualifications:
- Active Public Trust clearance
- B.S. Computer Science, Information Technology, or a related field
- 5+ years within IR in a large SOC (over 5,000 endpoints) with at least 3 years focused on proactive threat hunting or adversary emulation.
- 3+ years of experience with demonstrated proficiency in forming hypothesis, querying large datasets and identifying APT behavior.
- 2+ years’ experience with demonstrated proficiency in scripting languages including Python and PowerShell to develop new tools.
- This role most closely aligns with the NICE work role PD-WRL-006 (Threat Analysis).
- Active OSCP or GXPN certification
- Lead proactive threat hunting operations to identify Advanced Persistent Threats (APT), insider threats, malicious activity, and anomalous behaviors that evade traditional security controls.
- Develop and execute hypothesis-driven threat hunts leveraging threat intelligence, adversary tactics, techniques, and procedures (TTPs), behavioral analytics, and anomalous telemetry.
- Coordinate threat hunt activities within Agile two-week sprint cycles and ensure successful execution of all assigned hunt objectives and deliverables.
- Develop Threat Hunt Execution Plans that define hunt hypotheses, objectives, technical methodologies, required telemetry, and investigative procedures.
- Analyze endpoint, network, cloud, identity, SIEM, EDR, and log telemetry to identify indicators of compromise (IOCs), suspicious activity, and attack patterns.
- Coordinate and escalate confirmed or suspected findings to the Cybersecurity Triage and Incident Response teams in accordance with the Judiciary SOC Incident Response Plan (JSOCIRP).
- Collaborate with Detection Engineering teams to identify and remediate logging, telemetry, detection, or visibility gaps discovered during threat hunting operations.
- Work closely with Cyber Threat Intelligence teams to operationalize intelligence, enrich investigations, and identify emerging threats impacting the Judiciary.
- Conduct advanced analysis of threat actor behaviors, malware campaigns, phishing activity, suspicious infrastructure, and attack trends.
- Develop detailed Threat Hunt Reports documenting hunt objectives, findings, TTPs, queries used, telemetry gaps, identified risks, and recommendations for improved detections.
- Produce executive-level Hunt Sprint Reports summarizing hunt activities, operational impacts, recommendations, and emerging cybersecurity risks.
- Provide real-time investigative support during cybersecurity incidents and high-priority threat investigations.
- Perform analysis utilizing Splunk Enterprise Security, Microsoft Sentinel, Splunk SOAR, CrowdStrike, Qualys, ServiceNow, Jira, and other AO-approved security platforms.
- Support the development and refinement of threat models tailored to Judiciary systems, high-value assets, and mission-critical environments.
- Develop and maintain threat hunting SOPs, playbooks, technical procedures, and investigative methodologies aligned with AO and federal cybersecurity standards.
- Support enterprise security awareness initiatives through threat briefings, technical reporting, and operational presentations.
- Participate in weekly technical meetings, operational reviews, and status briefings with AO leadership and federal stakeholders.
- Provide mentorship, technical guidance, and quality oversight to threat hunters and supporting analysts.
- Support transition-in and transition-out activities, operational readiness, documentation development, and knowledge transfer activities.
- Drive continuous improvement initiatives focused on detection coverage, telemetry enrichment, operational efficiency, and threat hunting maturity.
Vacancy posted more than 2 months ago
Similar jobs that could be interesting for youBased on the AOUSC - Threat Hunt Lead in Washington DC vacancy
- ...Job Description Job Description cFocus Software seeks a Threat Hunt Lead to join our program supporting the Administrative Office of the United States Courts (AOUSC). This position is Hybrid with the onsite location being in Washington, DC. This position requires...SuggestedWork at office
- ...Position Title Cyber Threat Intelligence & Threat Hunting Lead Position Overview The Cyber Threat Intelligence & Threat Hunting Lead will oversee integrated cyber threat intelligence (CTI), detection engineering, and proactive threat hunting operations supporting...SuggestedFull time
cFocus Software Incorporated
Washington DCmore than 2 months ago - Base One Technologies is seeking a seasoned Cyber Threat Hunter to serve as the hunt and incident response SME in a high-security environment. You will apply in-depth knowledge of threat actor tools and TTPs, distill findings into executive summaries and deep technical...Suggested
- Information International Associates, Inc. is seeking a Cyber Threat Intelligence (CTI) Lead in Alexandria, VA. This role involves providing technical support to a 24x7 cyber program with responsibilities including the development of CTI analysis and incident response....Suggested
- ...Position Title Threat Emulation & Readiness Lead / Red Team Lead Position Overview The Threat Emulation & Readiness Lead will oversee adversary... ...behaviors. Coordinate closely with SOC, CTI, Threat Hunt, and Detection Engineering teams. Assess detection and...SuggestedFull time
cFocus Software Incorporated
Washington DCmore than 2 months ago - ...Evolver Federal is seeking a Lead Cyber Threat Analyst to fulfil a requirement for a potential government client. The Lead Cyber Threat Analyst... ...infrastructure. This role focuses on proactive threat hunting, intelligence analysis, and developing strategies to detect and...Flexible hours
Evolver Federal
Washington DC4 days ago $165k - $185k
Cyber Threat Intelligence (CTI) SME (Team Lead) Everforth ECS is seeking a Cyber Threat Intelligence (CTI) SME (Team Lead) to join our team in Arlington... ...into precise, actionable leads for Proactive Threat Hunting (PHB) and Incident Response (IRB) teams. This position...Remote work$165k - $185k
Job Description Everforth ECS is seeking a Cyber Threat Intelligence (CTI) SME (Team Lead) to join our team in Arlington, VA (Hybrid) . This position is... ...into precise, actionable leads for Proactive Threat Hunting (PHB) and Incident Response (IRB) teams. This position...Local areaRemote work- ...Position Title Insider Threat Program Lead Position Overview The Insider Threat Lead will design, mature, and oversee insider threat detection, analysis, and investigative support capabilities for a federal enterprise environment. The Lead will integrate user...Full time
- ...seeks a Forensic and Malware Lead to join our program supporting... ...of the United States Courts (AOUSC). This position is onsite location... ...of advanced persistent threats (APT), ransomware, phishing campaigns... ...investigations and threat hunting operations. Coordinate escalation...Full timeWork at office
- cFocus Software seeks a Blue Team Lead to join our program supporting... ...of the United States Courts (AOUSC). This position is Hybrid with... ...aligned to current cyber threats, adversary tactics, techniques... ...Detection Engineering, Threat Hunting, Incident Response, and Cyber...Full timeWork at office
- Everforth ECS in Arlington, VA is seeking a Cyber Threat Intelligence (CTI) SME (Team Lead) to direct a specialized threat collection and analytics capability... ...MITRE ATT&CK, and drive automation-first analytics pipelines that produce actionable hunt leads #J-18808-Ljbffr ECSRemote work
$130k - $180k
...prioritizing speed, ownership, and execution over bureaucracy. Lead Cyber Threat Intelligence Analyst Location: Onsite - Government-controlled... ...behavior Coordinate with SOC, incident response, and threat hunting teams to ensure CTI products are operationally relevant and...Full timeWork experience placementFlexible hoursShift work- RMGS, Inc. is recruiting a Threat & Risk Assessment Specialist based in Quito, Ecuador, with in-country travel required and contingent upon contract award. The role focuses on designing structured threat-assessment methodologies and establishing risk-classification criteria...Contract work
- Concentric Advisors in Arlington, VA is seeking a Corporate Security Lead to join our client-site team. The role focuses on providing holistic security, incident management, and threat assessment in a high-visibility environment. You will supervise on-site security staff...
- ...recognize that our employees are our number one resource. If you are a problem-solving people-person, apply today! Position Title: Lead Cyber Threat Analyst Location: Washington, DC Position Summary The Lead Cyber Threat Analyst serves as the technical and operational...For contractorsLocal area
- Job Announcement Lead Editor, Emerging Threats About MBN Middle East Broadcasting Networks (MBN) is the premier Arabic-first media organization that connects the Middle East and the United States. The company is in the midst of an exciting digital transformation and looking...
- Business Computers Management Consulting Group, LLC (BCMC) seeks a Senior JCDC Cyber Triage Analyst to provide expert threat triage, analysis, and interagency coordination for national cyber defense. The role mentors junior analysts and liaises with FBI, NSA, USCYBERCOM...
- NewGen Technologies is seeking a Senior Cyber Triage Analyst to serve as a technical SME in threat intelligence within a federal-facing triage team. You will handle complex analyses, mentor junior staff, and coordinate with interagency partners to produce high-quality...
- Sierra Nevada Corporation seeks an AI Threat Analyst III to support Insider Risk and AI-driven security initiatives. You will surface insider-threat trends, enable proactive defenses, and collaborate with stakeholders across cyber tools and data science. A TS clearance...
- ...Description Job Description Position Title SOC Operations Lead / Managed Detection & Response (MDR) Lead Position Overview... ...and incident impact assessments. Coordinate closely with Threat Hunting, CTI, Detection Engineering, and Incident Response teams....
$140k - $150k
...Incident Response Lead Everforth ECS is seeking an Incident Response Lead to work in our Washington, DC office / remote. The... ...operate as a senior security operations specialist consisting of hunting threats, developing detection mechanisms, refining processes, and...Work at officeRemote workECS Limited
Washington DC2 days ago- KBR’s National Security Solutions team seeks a Senior OPSEC Threat & Risk Assessment Specialist / Deputy OPSEC Lead to advance OPSEC across DoD programs and MRTFB. You will serve as the principal deputy to the OPSEC PM and lead threat and risk assessments while implementing...
- Steampunk, Inc. is seeking a Red-Team / Adversarial Security Lead to plan and execute assessments across enterprise environments. You will develop threat models, identify attack paths, run red-team plans, and evaluate security controls. You will analyze findings, communicate...
- ...professional to oversee continuous security operations across enterprise infrastructure. You will lead threat detection, incident response, and proactive threat hunting while managing SIEM telemetry and investigations of breach attempts. This role ensures compliance with...
- Leidos is seeking a Security Operations Center (SOC) Lead in Alexandria, VA, to direct day-to-day SOC activities and manage 24x7 incident response operations for the DISA GSM-O program. The role requires a TS/SCI clearance, a strong background in cybersecurity, and hands...
- GardaWorld Security Services is seeking a Surveillance Security Officer to monitor CCTV and security systems, report incidents, and support physical security teams on site in the Bethesda area. The role emphasizes vigilance, communication, and timely information sharing...Day shiftAfternoon shift
- Steampunk is seeking a Red-Team / Adversarial Security Lead to plan and execute threat-based assessments across enterprise environments. You will develop threat models, conduct adversarial testing, and evaluate security controls to support pass/fail safety gating. You will...
- Evolver Federal is seeking a Lead Incident Responder to fulfill a requirement for a potential... ...3.0), lead investigations into complex threats, and deliver compliance reporting to... ...programs' SELC/SDLC Knowledge of threat hunting methodologies and proactive detection strategies...Contract workFlexible hours
- cFocus Software seeks a Cybersecurity Shift Lead to join our program supporting the Administrative Office of the United States Courts (AOUSC). This position is Hybrid with the onsite location being in Washington, DC. This position requires a Public Trust clearance....Full timeWork at officeShift work
Do you want to receive more vacancies?
Subscribe and receive similar vacancies to AOUSC - Threat Hunt Lead. Be the first to apply!
