Incident Responder

cFocus Software seeks a Incident Responder to support the Administrative Offices of the United States Courts (AOUSC) in Washington, DC. This position will require 4 days a week onsite at the Thurgood Marshall Building and 1 day remote with hours of 8am- 4:30pm. The Incident Responder supports the Administrative Office of the U.S. Courts (AOUSC) by delivering advanced cybersecurity incident response and threat hunting services across both cloud and on-premises environments.

Requirements

• Provide incident response support for declared security incidents and proactively hunt for threats not detected through automated systems
• Conduct counterintelligence activities, develop Threat Actor (TA) dossiers, and identify adversary tactics, techniques, and procedures (TTPs)
• Analyze SIEM alerts and security events to determine risk, impact, and appropriate response actions
• Collect and analyze forensic data from compromised systems using EDR tools and custom scripts
• Track and document incidents from initial detection through final resolution
• Respond to government technical requests via ITSM platforms (e.g., HEAT, ServiceNow)
• Perform malware triage and root cause analysis
• Review open-source intelligence for emerging threats and adversary activity
• Collaborate with court IT personnel to troubleshoot and resolve endpoint detection issues
• Participate in after-action reviews and provide recommendations for improving security posture
• Attend Agile Scrum standups and report on assigned Jira tasks
• Review SOC incident reports and recommend enhancements, escalations, or re-evaluations

Benefits

• Health Insurance
• Dental Insurance
• Vision Insurance
• Life Insurance
• Paid Time Off
• Retirement Plan
• 401(k) Matching
• Health Savings Account (HSA)
• Flexible Spending Account (FSA)
• Employee Assistance Program (EAP)