Description
cFocus Software is hiring a Detection Engineering Lead to support the Administrative Office of the United States Courts’ Security Operations Division. The hybrid role is based in Washington, DC and requires an active Public Trust clearance, a relevant bachelor’s degree, and extensive experience in large-scale security operations, proactive detection engineering, threat hunting, adversary emulation, SIEM detection development, scripting, and threat analysis. Responsibilities include leading detection engineering operations, developing and tuning SIEM rules and workflows, analyzing false positives, coordinating with SOC and Blue Team teams, maintaining detection documentation and Agile workflows, and reporting on detection performance and security events.
