Threat Detection Engineer - Hybrid (Public Trust)

cFocus Software Incorporated; Washington (District of Columbia); Hybrid; USD 110,000 - 140,000; Full time

Job summary

cFocus Software Incorporated is seeking a Detection Engineer to support the AOUSC program. The role is hybrid with onsite work in Washington, DC and requires a Public Trust clearance.

The candidate will apply threat hunting, adversary emulation, and SIEM-detection techniques using Splunk ES or Microsoft Sentinel. Ideal applicants have 3+ years in threat hunting, 2+ years forming hypotheses and querying large datasets to identify APT behavior.

Qualifications

• Active Public Trust clearance is required.
• Bachelor's degree in CS/IT or related field.
• 3+ years’ threat hunting or adversary emulation experience.
• 2+ years forming hypotheses, querying large datasets and identifying APT behavior.
• 2+ years’ experience with Python or PowerShell scripting to develop tools.
• 2+ years’ experience developing detections in a SIEM (Splunk ES or Microsoft Sentinel).

Skills

Threat hunting

Adversary emulation

Hypothesis formation

Data querying

Education

B.S. Computer Science / Information Technology or related field

Tools

Splunk ES

Microsoft Sentinel

Python

PowerShell

Job description

cFocus Software Incorporated is seeking a Detection Engineer to support the AOUSC program. The role is hybrid with onsite work in Washington, DC and requires a Public Trust clearance.

The candidate will apply threat hunting, adversary emulation, and SIEM-detection techniques using Splunk ES or Microsoft Sentinel. Ideal applicants have 3+ years in threat hunting, 2+ years forming hypotheses and querying large datasets to identify APT behavior.