Supervisory IT Specialist (Security)

Administrative Office of the U.S. Courts; Washington (District of Columbia); On-site; USD 90,000 - 130,000; Full time

Job summary

The Administrative Office of the U.S. Courts seeks a cybersecurity professional for the Information Technology Security Office, Security Operations Division. The role centers on leading cyber threat intelligence, threat hunting, and detection engineering to safeguard the Judiciary around the clock.

You will analyze threat data from open-source and classified sources, develop detection methodologies, and proactively hunt for threats to mitigate risks to mission-critical systems.

Qualifications

• At least one full year (52 weeks) of specialized experience in cyber threat intelligence, threat hunting, and detection engineering.
• Experience analyzing and integrating threat intelligence from open-source and classified sources.
• Experience developing detection methodologies.
• Experience conducting proactive threat hunting to identify and mitigate cyber threats.

Education

Bachelor's degree in computer science, cybersecurity, or equivalent

Job description

This position is in the Department of the Chief Information Officer, Information Technology Security Office, Security Operations Division, Security Operations Support Branch. The Division protects the Judiciary from cyber threats, strengthens security and threat awareness, prevents operational disruptions, and provides evaluation services to improve system and program security. Previous applications under announcement #26-CIO-13031720 will be considered.

Applicants must have demonstrated experience as listed below. This requirement is according to the AO Classification, Compensation, and Recruitment Systems which include interpretive guidance and reference to the OPM Operating Manual for Qualification Standards for General Schedule Positions.

Specialized Experience:

Applicants must have at least one full year (52 weeks) of specialized experience which is in or directly related to the line of work of this position. Specialized experience is demonstrated experience in ALL of the following:

1. Leading cyber threat intelligence, threat hunting, and detection engineering in support of 24/7 security operation center.
2. Analyzing and integrating threat intelligence from open-source and classified sources.
3. Developing detection methodologies.
4. Conducting proactive threat hunting to identify and mitigate cyber threats.

Desired Education:

Bachelor's degree in computer science, cybersecurity, or equivalent technical field is highly desired.

Desired (but not required certification):

• Offensive Security Professional (OSCP)
• GIAC Reverse Engineering Malware (GREM)
• GIAC Exploit Researcher
• Advanced Penetration Tester (GXPN)