Supervisory Information Technology Specialist (Security)

Administrative Office of the U.S. Courts; Washington (District of Columbia); On-site; USD 100,000 - 150,000; Full time

Job summary

Administrative Office of the U.S. Courts is seeking a cybersecurity professional in Washington, DC, within the Department of the Chief Information Officer, Information Technology Security Office, Security Operations Division.

The candidate will contribute to 24/7 security, threat intelligence, and threat-hunting efforts. A Bachelor’s degree in a related field is highly desired, with OSCP/GREM/GXPN certifications listed as desirable qualifications.

Qualifications

• At least one full year (52 weeks) of specialized experience in or related to the line of work.
• Specialized experience demonstrated in ALL of the following: Leading cyber threat intelligence, threat hunting, and detection engineering.
• Experience analyzing threat intelligence from open-source and classified sources.
• Experience developing detection methodologies and conducting proactive threat hunting to identify and mitigate cyber threats.

Skills

Threat intelligence

Threat hunting

Detection engineering

Security operations

Education

Bachelor's degree in computer science or cybersecurity

Job description

This position is in the Department of the Chief Information Officer, Information Technology Security Office, Security Operations Division, Security Operations Support Branch. The Security Operations Division protects the judiciary from cyber threats, strengthens the judiciary's security posture and threat awareness, eliminates threats before they can harm operations, and provides evaluation services to strengthen systems and programs.

Applicants must have demonstrated experience as listed below. This requirement is according to the AO Classification, Compensation, and Recruitment Systems which include interpretive guidance and reference to the OPM Operating Manual for Qualification Standards for General Schedule Positions.

Specialized Experience:

Applicants must have at least one full year (52 weeks) of specialized experience which is in or directly related to the line of work of this position.

Specialized experience is demonstrated experience in ALL of the following:

1. Leading cyber threat intelligence, threat hunting, and detection engineering in support of 24/7 security operation center.
2. Analyzing and integrating threat intelligence from open-source and classified sources.
3. Developing detection methodologies.
4. Conducting proactive threat hunting to identify and mitigate cyber threats.

Desired Education:

Bachelor's degree in computer science, cybersecurity, or equivalent technical field is highly desired.

Desired (but not required certification):

• Offensive Security Professional (OSCP)
• GIAC Reverse Engineering Malware (GREM)
• GIAC Exploit Researcher
• Advanced Penetration Tester (GXPN)