Top Tech Jobs & Startup Jobs

Lead cyber exercises and support for AOUSC: oversee incident response operations, capacity planning, and develop/facilitate live trainings for government staff. Assess learner progress, provide real-time feedback, and collaborate with federal stakeholders in a hybrid Washington, DC role requiring Public Trust clearance.

Support AOUSC as a Detection Engineer performing proactive threat hunting and adversary emulation. Form hypotheses, query large datasets to identify APT behavior, script tools in Python and PowerShell, and develop SIEM detections using Splunk ES or Microsoft Sentinel. Hybrid role based in Washington, DC requiring an active Public Trust clearance.

Lead proactive, hypothesis-driven threat hunts to detect APTs and insider threats across endpoint, network, cloud, identity, SIEM, and EDR telemetry. Develop hunt plans, queries, and reports; coordinate with detection engineering, threat intelligence, and incident response; mentor analysts; produce executive sprint reports; and maintain SOPs, playbooks, and telemetry/enrichment efforts for the Judiciary SOC.

Tier-2 Incident Response Analyst supporting AOUSC in a hybrid DC role. Perform live triage, log correlation, detection rule refinement, and decode/decrypt obfuscated payloads using Python and PowerShell. Use Velociraptor, Splunk ES, and Sentinel while following NIST incident handling guidance. Active Public Trust and SANS GCIH or GCIA required.

Lead 24x7 SOC and MDR operations for a large federal enterprise: manage analysts, SIEM and EDR/XDR monitoring, triage, incident coordination, playbooks, reporting, metrics (MTTD/MTTR), and executive briefings. Coordinate with threat hunting, detection engineering, CTI, and incident response and support staffing, proposals, and transitions.

Manage AOUSC cybersecurity program delivery, providing program leadership, oversight of SOC services, staffing, planning, risk management, reporting, compliance with NIST/ITIL, and ensuring operational readiness across IR, forensics, threat hunting, detection engineering, and related functions.

Support AOUSC insider-threat program by performing live triage, log correlation, and detection rule refinement. Utilize Velociraptor, Splunk ES, and Sentinel, and follow NIST incident-handling guidance. Position requires an active Public Trust clearance and relevant IR/insider-threat experience.

Design, mature, and lead insider threat detection and investigative capabilities for a federal enterprise. Integrate UEBA, SIEM, EDR, DLP, and identity telemetry to detect and investigate data exfiltration, credential abuse, privilege misuse, and anomalous behavior. Coordinate with SOC, CTI, HR, legal, and counterintelligence; develop reporting, case management, dashboards, policy, and executive briefings; perform threat assessments and present findings.

Lead detection engineering for AOUSC: research, develop, test, deploy, tune, and maintain SIEM detections and RBA framework; coordinate with SOC teams, threat intel, and stakeholders; produce reports and documentation; ensure timely deployment of vulnerability-related detections.

Support AOUSC threat hunting program in a hybrid Washington, DC role. Requires active Public Trust clearance, a BS in CS/IT or related field, 3+ years proactive threat hunting/adversary emulation, experience querying large datasets to identify APT behavior, and scripting proficiency (Python, PowerShell) to develop tools.