Top Tech Jobs & Startup Jobs

Conduct digital forensic examinations of disk, memory, and registry; perform artifact analysis (SRUM, Shellbags, Prefetch); use Axiom, EnCase, FTK, X-Ways, Volatility; follow federal evidence guidelines and chain-of-custody procedures. Hybrid role supporting AOUSC with onsite presence in Washington, DC and requires Public Trust clearance.

Perform cyber threat intelligence analysis and advisory support: analyze data needs and quality, conduct in-depth technical analysis of telemetry to identify patterns, trends, IOCs and TTPs, and collect/aggregate threat intelligence from OSINT, dark web forums, and commercial feeds. Hybrid role in Washington, DC requiring an active Public Trust clearance.

Write and maintain cybersecurity documentation for AOUSC, including SOPs, incident response playbooks, and after-action reports. Ensure artifacts align with federal standards (NIST 800-53, RMF, CSF). Work hybrid in Washington, DC and hold an active Public Trust clearance and Security+ certification.

Lead CTI, detection engineering, and threat hunting operations. Develop intelligence-driven detections, hunt playbooks, SIEM/analytics content, and SOAR integrations. Conduct hypothesis-based hunts aligned to MITRE ATT&CK, analyze malware and adversary campaigns, produce threat intelligence reporting, and brief executives on emerging threats and operational risk.

Design, develop, and maintain custom geospatial and situational awareness applications using ESRI/ArcGIS tooling. Integrate systems, create dashboards, automate workflows with Python/Notebooks, execute manual and automated testing, ensure DHS/federal compliance, and support GMO program needs.

Design, develop, and maintain custom geospatial and situational awareness applications for DHS using ESRI/ArcGIS technologies. Lead requirements analysis, integration, automation (Python/Notebooks), web app development (Experience Builder, ArcGIS API for JavaScript), testing (manual and automated), and dashboard creation while ensuring compliance with DHS directives and federal standards.

Perform hypothesis-driven threat hunts and incident response across cloud and on-prem environments (Azure, O365, AD, Zscaler). Use Splunk ES, Sentinel, EDR (CrowdStrike), Sysmon/Auditd, and network tools to collect, analyze, and document findings. Produce hunt hypotheses, reports, detection logic, SOPs, and weekly updates. Participate in agile scrum, Jira ticketing, on-call IR support, and coordinate with court IT for agent deployment and remediation.