Job description
This position is in the Department of the Chief Information Officer, Information Technology Security Office, Security Operations Division. The Security Operation Division protects the judiciary from cyber threats, strengthens the judiciary's security posture and threat awareness, eliminates threats before they can harm operations, and provides evaluation services to strengthen systems and programs. The Information Technology Specialist (Security) leads detection engineering efforts to identify and categorize cybersecurity threats impacting the confidentiality, integrity, or availability of judicial data. The incumbent ensures detections are appropriate for the threat environment and are consistently validated. The incumbent perform multiple and varying assignments under the direction of the Chief, Security Operations Support Branch. Duties Include: Providing technical leadership, direction, and federal oversight for the detection engineering team in support of continuous cybersecurity operations. Conducting development, testing, deployment, and lifecycle management of detection logic used to identify malicious activity across the judiciary's information technology fabric. Integrating threat intelligence reporting and indicators of compromise to inform detection logic…
