AOUSC - Detection Engineer

cFocus Software Incorporated; Washington (District of Columbia); Hybrid; USD 110,000 - 140,000; Full time

Job summary

cFocus Software Incorporated is seeking a Detection Engineer to support the AOUSC program. The role is hybrid with onsite work in Washington, DC and requires a Public Trust clearance.

The candidate will apply threat hunting, adversary emulation, and SIEM-detection techniques using Splunk ES or Microsoft Sentinel. Ideal applicants have 3+ years in threat hunting, 2+ years forming hypotheses and querying large datasets to identify APT behavior.

Qualifications

• Active Public Trust clearance is required.
• Bachelor's degree in CS/IT or related field.
• 3+ years’ threat hunting or adversary emulation experience.
• 2+ years forming hypotheses, querying large datasets and identifying APT behavior.
• 2+ years’ experience with Python or PowerShell scripting to develop tools.
• 2+ years’ experience developing detections in a SIEM (Splunk ES or Microsoft Sentinel).

Skills

Threat hunting

Adversary emulation

Hypothesis formation

Data querying

Education

B.S. Computer Science / Information Technology or related field

Tools

Splunk ES

Microsoft Sentinel

Python

PowerShell

Job description

Overview

cFocus Software seeks a Detection Engineer to join our program supporting the Administrative Office of the United States Courts (AOUSC). This position is Hybrid with onsite location in Washington, DC. This position requires a Public Trust clearance.

Qualifications

• Active Public Trust clearance
• B.S. Computer Science, Information Technology, or a related field
• 3+ years’ experience conducting proactive threat hunting or adversary emulation
• 2+ years demonstrated experience forming hypotheses, querying large datasets and identifying APT behavior
• 2+ years’ experience in scripting languages including Python and PowerShell to develop new tools
• 2+ years’ experience with demonstrated proficiency developing detections in a SIEM (utilizing Splunk ES or Microsoft Sentinel)