Jobs at cFocus Software Incorporated

Manage enterprise helpdesk operations supporting EEOC headquarters and field offices. Lead ITIL service-management processes, staffing, ticket quality, escalations, reporting, service-level performance, contingency planning, knowledge management, equipment accountability, security-incident coordination, personnel development, customer meetings, and service improvements. The role requires onsite federal support in Washington, DC, Public Trust eligibility, emergency or weekend coverage, and occasional travel.

Administer and support EEOC enterprise systems across Azure, Active Directory, Microsoft 365, Windows, networks, applications, and mobile devices. Perform advanced incident troubleshooting, root-cause analysis, software deployment, patching, automation, migration support, system hardening, vulnerability remediation, backup and recovery. Document incidents, coordinate with technical teams and vendors, and maintain compliance with ITIL, NIST, security, privacy, and USGCB requirements. This is an onsite Washington, DC role requiring Public Trust eligibility.

Leads business process analysis, workflow assessments, stakeholder workshops, and requirements management for EEOC enterprise IT and FOIA systems. Translates business needs into actionable technical requirements, develops process models and documentation, evaluates applications, identifies inefficiencies, and recommends modernization, automation, integration, and service improvements. Supports FOIA case management system implementation, testing, maintenance, reporting, records management, and continuous improvement while coordinating with agency stakeholders, technical teams, and government management.

Develop, maintain, and deploy custom geospatial and situational-awareness applications for DHS using C#, .NET, ESRI technologies, Python notebooks, and cloud infrastructure. Integrate APIs and enterprise systems, implement automated tests and DevSecOps practices, support deployments across environments, ensure accessibility and security compliance, and produce documentation and test artifacts.

Support DHS program testing for geospatial, web, cloud, and enterprise systems. Develop risk-based test strategies, plans, manual and automated tests, traceability, test data, and execution evidence. Validate APIs, integrations, .NET/Python/JS components, ArcGIS capabilities, accessibility, security, and performance. Maintain automation in GitLab, execute tests across environments, and coordinate with security and operations to ensure compliance with DHS requirements.

Support DHS geospatial mission by ingesting, processing, validating, and maintaining GIS datasets; produce web maps, hosted layers, dashboards, and metadata; perform QA/QC, spatial analysis, and geoprocessing; document data lineage; support testing, Agile workflows, and configuration using ESRI tools and government-approved repositories.

Manage and coach Agile software, data, cloud, and geospatial teams for DHS. Oversee scope, schedule, cost, risks, requirements, backlogs, and delivery; facilitate ceremonies; maintain Jira/Confluence artifacts; coordinate stakeholders, subcontractors, and federal governance; track staffing, security, and program controls.

Provide programmatic support to DHS GMO managing enterprise geospatial data and applications. Lead or support teams to implement geospatial IT solutions, develop policies and GII requirements, prioritize resources, apply Agile/Waterfall methodologies, and deliver tactical and strategic recommendations. Maintain DC business-hour availability and respond to technical issues within 24 hours.

Lead enterprise geospatial architecture for DHS: develop current/target-state architectures, assess environments, perform gap analyses, recommend standards and roadmaps, integrate Esri/AWS solutions, ensure SELC/FISMA/IPv6/Section 508 compliance, guide DevSecOps and verification, mentor teams, and oversee deployments, operations, and technical evaluations.

Act as the principal ISSO for DHS geospatial systems: maintain SSPs, implement and assess NIST controls, run ISCM, coordinate authorization (ATO/ATC), remediate vulnerabilities, advise system owners, and manage security documentation and reporting.

Serve as Scrum Master for DHS geospatial teams, enforcing Agile/Scrum, improving processes, managing Custom and COTS development, and providing programmatic and geospatial subject-matter guidance to prioritize and implement GII requirements.

Support AOUSC as a Detection Engineer performing proactive threat hunting and adversary emulation. Form hypotheses, query large datasets to identify APT behavior, script tools in Python and PowerShell, and develop SIEM detections using Splunk ES or Microsoft Sentinel. Hybrid role based in Washington, DC requiring an active Public Trust clearance.

Lead cyber exercises and support for AOUSC: oversee incident response operations, capacity planning, and develop/facilitate live trainings for government staff. Assess learner progress, provide real-time feedback, and collaborate with federal stakeholders in a hybrid Washington, DC role requiring Public Trust clearance.

Lead and manage 24x7x365 SOC operations for the AOUSC, overseeing alert triage, incident response, containment, remediation, forensics, and post-incident reviews. Ensure adherence to NIST and ITIL standards, manage SOC staff and operational metrics, maintain SOPs and work instructions, coordinate with stakeholders, provide executive and technical briefings, and support continuous improvement, onboarding, and transition activities.

Tier-2 Incident Response Analyst supporting AOUSC in a hybrid DC role. Perform live triage, log correlation, detection rule refinement, and decode/decrypt obfuscated payloads using Python and PowerShell. Use Velociraptor, Splunk ES, and Sentinel while following NIST incident handling guidance. Active Public Trust and SANS GCIH or GCIA required.

Lead proactive, hypothesis-driven threat hunts to detect APTs and insider threats across endpoint, network, cloud, identity, SIEM, and EDR telemetry. Develop hunt plans, queries, and reports; coordinate with detection engineering, threat intelligence, and incident response; mentor analysts; produce executive sprint reports; and maintain SOPs, playbooks, and telemetry/enrichment efforts for the Judiciary SOC.

Lead 24x7 SOC and MDR operations for a large federal enterprise: manage analysts, SIEM and EDR/XDR monitoring, triage, incident coordination, playbooks, reporting, metrics (MTTD/MTTR), and executive briefings. Coordinate with threat hunting, detection engineering, CTI, and incident response and support staffing, proposals, and transitions.

Manage AOUSC cybersecurity program delivery, providing program leadership, oversight of SOC services, staffing, planning, risk management, reporting, compliance with NIST/ITIL, and ensuring operational readiness across IR, forensics, threat hunting, detection engineering, and related functions.

Support AOUSC insider-threat program by performing live triage, log correlation, and detection rule refinement. Utilize Velociraptor, Splunk ES, and Sentinel, and follow NIST incident-handling guidance. Position requires an active Public Trust clearance and relevant IR/insider-threat experience.

Lead detection engineering for AOUSC: research, develop, test, deploy, tune, and maintain SIEM detections and RBA framework; coordinate with SOC teams, threat intel, and stakeholders; produce reports and documentation; ensure timely deployment of vulnerability-related detections.