{"id":2587812,"url":"https://alion.io/job/cfocussoftware-aousc-blue-team-lead-cfocus-software-incorporated","title":"AOUSC - Blue Team Lead - cFocus Software Incorporated","company":{"id":4419850,"name":"cFocus Software Incorporated","domain":"cfocussoftware.com","url":"https://alion.io/company/cfocussoftware","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"JazzHR","truth_index":null},"role":"Backend","role_family":"Backend","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Washington, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":136000,"max_usd":275000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1093},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"ITIL","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"NIST CSF","optional":false},{"name":"Red Teaming","optional":false}],"status":"live","first_seen_at":"2026-10-15T04:37:32Z","employer_posted_date":"2026-10-15","last_verified_at":"2026-10-16T08:47:30Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"cFocus Software seeks a Blue Team Lead to join our program supporting the Administrative Office of the United States Courts (AOUSC). This position is Hybrid with the onsite location being in Washington, DC. This position requires a Public Trust clearance.\nQualifications:\nActive Public Trust clearance\nB.S. Computer Science, Information Technology, or a related field\nFive (5) year’s total project management related experience in the Cybersecurity or information technology industry. \nThis includes development of policies and procedures, technical standards, and workflow development. \nThree (3) years of experience delivering cybersecurity services as part of a service delivery team and planning, managing and performing cyber security assessments, including assessment reporting deliverables.\nActive CISA or CISSP certification\nDuties:\nLead and manage Blue Team support services that complement Red Team exercises and support overall Judiciary cybersecurity readiness.\nDevelop methodologies for assessing customer environments using previous Red Team reporting, cybersecurity best practices, MITRE ATT&CK, NIST CSF 2.0, and ITSO leadership guidance.\nConduct pre-engagement technical assessments to identify security gaps, misconfigurations, control weaknesses, and opportunities for defensive improvements.\nDevelop actionable mitigation recommendations that clearly identify technical deficiencies, operational risks, remediation actions, required tools and skills, expected outcomes, and implementation timelines.\nDevelop and deliver pre-engagement technical assessment reports and mitigation plans for AO staff and court units prior to Red Team exercises.\nFacilitate post-engagement meetings with Red Team customers and provide detailed remediation guidance based on findings from Red Team activities.\nPerform post-engagement assessments utilizing Red Team reports to identify missed controls, detection gaps, and unsuccessful defensive measures.\nDevelop post-engagement assessment reports documenting improvements, residual risks, and recommended enhancements to customer environments.\nLead the development and execution of cyber exercise support services including governance, communication strategies, facilitation, and operational coordination.\nDesign, plan, facilitate, and execute tabletop exercises, inject-driven cyber exercises, and operational readiness scenarios for technical and executive audiences.\nDevelop realistic exercise scenarios aligned to current cyber threats, adversary tactics, techniques, and procedures (TTPs), and Judiciary operational environments.\nCoordinate with ITSO Divisions, SOC personnel, Detection Engineering, Threat Hunting, Incident Response, and Cyber Threat Intelligence teams to support exercise planning and defensive operations.\nConduct post-exercise analysis and develop executive summaries detailing strengths, weaknesses, lessons learned, operational readiness, and improvement opportunities.\nSupport Detection Engineering efforts by assisting with analysis of threats, exploits, attack techniques, detection opportunities, and defensive recommendations.\nDevelop and brief technical and executive-level presentations regarding Blue Team activities, cyber exercises, threat trends, and defensive posture improvements.\nDevelop KPI metrics, operational reporting, annual summaries, and executive dashboards demonstrating improvements in Judiciary cybersecurity protection measures.\nProvide operational leadership and oversight for Blue Team activities in alignment with ITIL v4 service management principles and AO cybersecurity directives.\nParticipate in weekly technical meetings, monthly program reviews, operational readiness meetings, and stakeholder briefings.\nDevelop and maintain SOPs, work instructions, governance documentation, communication strategies, and process documentation supporting Blue Team operations.\nAssist with transition-in and transition-out planning, operational readiness activities, and knowledge transfer requirements.\nCollaborate with Red Team personnel to evaluate exploit paths, detection opportunities, and mitigation effectiveness.\nSupport continuous improvement initiatives by identifying gaps in people, process, and technology across cybersecurity operations.\nMaintain awareness of emerging threats, adversary tradecraft, cybersecurity frameworks, and defensive security technologies relevant to the Federal Judiciary.","description_format":"text","description_chars":4409,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing"],"lifecycle":[{"event":"open","at":"2026-10-15T04:37:32Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":35,"reasons":["conf:2","velocity","win:early"],"computed_at":"2026-10-16T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/cfocussoftware-aousc-blue-team-lead-cfocus-software-incorporated","json_url":"https://alion.io/job/cfocussoftware-aousc-blue-team-lead-cfocus-software-incorporated.json","meta":{"generated_at":"2026-10-16T11:08:24Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9863,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4419850},"rest":"https://alion.io/mcp/rest/get_company?id=4419850"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcfocussoftware-aousc-blue-team-lead-cfocus-software-incorporated"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcfocussoftware-aousc-blue-team-lead-cfocus-software-incorporated"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcfocussoftware-aousc-blue-team-lead-cfocus-software-incorporated"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cfocussoftware-aousc-blue-team-lead-cfocus-software-incorporated\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcfocussoftware-aousc-blue-team-lead-cfocus-software-incorporated"}]}