Blue Team Lead - Cyber Defense & Exercise Leader

cFocus Software Incorporated; Washington (District of Columbia); Hybrid; USD 140,000 - 210,000; Full time

Job summary

cFocus Software Incorporated seeks a Blue Team Lead to support the Administrative Office of the United States Courts (AOUSC). The role is hybrid with onsite in Washington, DC and requires a Public Trust clearance.

The position emphasizes leading blue team operations, developing defensive methodologies using MITRE ATT&CK and NIST CSF 2.0, and coordinating with ITSO, SOC, and Threat Hunting teams. It aims to strengthen judiciary cybersecurity readiness with governance and reporting.

Qualifications

• Active Public Trust clearance.
• Bachelor’s degree in CS/IT or related field.
• 5 years total project management experience in cybersecurity/IT.
• This includes development of policies, procedures, technical standards, and workflow development.
• 3 years experience delivering cybersecurity services as part of a service delivery team and performing cyber security assessments.

Responsibilities

• Lead and manage Blue Team support services that complement Red Team exercises and support Judiciary cybersecurity readiness.
• Develop methodologies for assessing customer environments using MITRE ATT&CK, NIST CSF 2.0, and ITSO leadership guidance.
• Conduct pre-engagement technical assessments to identify security gaps and remediation opportunities.
• Develop actionable mitigation recommendations with timelines and required tools/skills.
• Deliver pre-engagement technical assessment reports and mitigation plans for AO staff and court units.
• Facilitate post-engagement meetings with Red Team customers and provide remediation guidance.
• Perform post-engagement assessments to identify missed controls and defensive gaps.
• Develop post-engagement reports documenting improvements and residual risks.

Skills

Public Trust clearance

Project management

Policy development

Cybersecurity services delivery

Technical standards

Education

B.S. Computer Science, Information Technology, or related field

CISA or CISSP certification

Job description

cFocus Software Incorporated seeks a Blue Team Lead to support the Administrative Office of the United States Courts (AOUSC). The role is hybrid with onsite in Washington, DC and requires a Public Trust clearance.

The position emphasizes leading blue team operations, developing defensive methodologies using MITRE ATT&CK and NIST CSF 2.0, and coordinating with ITSO, SOC, and Threat Hunting teams. It aims to strengthen judiciary cybersecurity readiness with governance and reporting.