Top Tech Jobs & Startup Jobs

Perform cyber threat intelligence analysis and advisory support: analyze data needs and quality, conduct in-depth technical analysis of telemetry to identify patterns, trends, IOCs and TTPs, and collect/aggregate threat intelligence from OSINT, dark web forums, and commercial feeds. Hybrid role in Washington, DC requiring an active Public Trust clearance.

Conduct digital forensic examinations of disk, memory, and registry; perform artifact analysis (SRUM, Shellbags, Prefetch); use Axiom, EnCase, FTK, X-Ways, Volatility; follow federal evidence guidelines and chain-of-custody procedures. Hybrid role supporting AOUSC with onsite presence in Washington, DC and requires Public Trust clearance.

Lead CTI, detection engineering, and threat hunting operations. Develop intelligence-driven detections, hunt playbooks, SIEM/analytics content, and SOAR integrations. Conduct hypothesis-based hunts aligned to MITRE ATT&CK, analyze malware and adversary campaigns, produce threat intelligence reporting, and brief executives on emerging threats and operational risk.

Support AOUSC insider-threat program by performing live triage, log correlation, and detection rule refinement. Utilize Velociraptor, Splunk ES, and Sentinel, and follow NIST incident-handling guidance. Position requires an active Public Trust clearance and relevant IR/insider-threat experience.

Lead and manage 24x7x365 SOC operations for the AOUSC, overseeing alert triage, incident response, containment, remediation, forensics, and post-incident reviews. Ensure adherence to NIST and ITIL standards, manage SOC staff and operational metrics, maintain SOPs and work instructions, coordinate with stakeholders, provide executive and technical briefings, and support continuous improvement, onboarding, and transition activities.

Lead cyber exercises and support for AOUSC: oversee incident response operations, capacity planning, and develop/facilitate live trainings for government staff. Assess learner progress, provide real-time feedback, and collaborate with federal stakeholders in a hybrid Washington, DC role requiring Public Trust clearance.

Manage AOUSC cybersecurity program delivery, providing program leadership, oversight of SOC services, staffing, planning, risk management, reporting, compliance with NIST/ITIL, and ensuring operational readiness across IR, forensics, threat hunting, detection engineering, and related functions.

Lead proactive, hypothesis-driven threat hunts to detect APTs and insider threats across endpoint, network, cloud, identity, SIEM, and EDR telemetry. Develop hunt plans, queries, and reports; coordinate with detection engineering, threat intelligence, and incident response; mentor analysts; produce executive sprint reports; and maintain SOPs, playbooks, and telemetry/enrichment efforts for the Judiciary SOC.

Write and maintain cybersecurity documentation for AOUSC, including SOPs, incident response playbooks, and after-action reports. Ensure artifacts align with federal standards (NIST 800-53, RMF, CSF). Work hybrid in Washington, DC and hold an active Public Trust clearance and Security+ certification.

Design, mature, and lead insider threat detection and investigative capabilities for a federal enterprise. Integrate UEBA, SIEM, EDR, DLP, and identity telemetry to detect and investigate data exfiltration, credential abuse, privilege misuse, and anomalous behavior. Coordinate with SOC, CTI, HR, legal, and counterintelligence; develop reporting, case management, dashboards, policy, and executive briefings; perform threat assessments and present findings.