cFocus Software Incorporated · 1 day ago
HHS - Digital Forensics/Threat Hunter
United States
Full-time
Remote
Senior Level
6+ years expcFocus Software seeks a Digital Forensics/Threat Hunter to join our program supporting the Department of Health and Human Services (HHS). The role involves conducting proactive threat hunting, performing digital forensic analysis, and supporting incident response efforts.
ChatbotGovernmentInformation TechnologySoftware
No H1B
Security Clearance RequiredU.S. Citizen Only
Responsibilities
Conduct proactive threat hunting using hypothesis-driven techniques, MITRE ATT&CK mapping, and behavioral analytics
Perform digital forensic acquisition and analysis of endpoints, servers, cloud workloads, and network artifacts
Investigate advanced threats, ransomware, insider threats, data exfiltration, and persistent adversary activity
Analyze malware, scripts, and suspicious binaries including reverse engineering when required
Identify Indicators of Compromise (IOCs), Tactics, Techniques, and Procedures (TTPs), and attack timelines
Maintain forensic chain-of-custody and evidence integrity for legal and regulatory purposes
Support incident containment, eradication, and recovery actions in coordination with SOC and IR teams
Develop and maintain forensic and threat hunting SOPs, playbooks, and workflows
Produce forensic reports, threat hunting reports, and incident documentation within defined SLAs
Support FOIA searches, OGC litigation holds, and OIG criminal investigations
Maintain and tune forensic and threat hunting tools within the SOC ecosystem
Collaborate with CISA, HHS CSIRC, and HRSA stakeholders during investigations
Participate in cyber exercises, tabletop exercises, and after-action reviews
Provide recommendations to improve detection, logging, and incident response capabilities
Qualification
Required
Bachelor's degree in Cybersecurity, Computer Science, Digital Forensics, or related field
Minimum 6–9 years of experience in digital forensics, threat hunting, or incident response
Hands-on experience with forensic tools (EnCase, FTK, Volatility) and EDR platforms
Strong understanding of NIST SP 800-61, NIST SP 800-86, NIST SP 800-53, and federal IR requirements
Experience analyzing endpoint, network, cloud, and log-based forensic data
Familiarity with malware analysis, scripting, and attacker tradecraft
Strong written and verbal communication skills
Ability to obtain a Public Trust clearance
Preferred
GCFA, GCIH, GNFA, CISSP, or CEH
Company
cFocus Software Incorporated
cFocus Software automates FedRAMP compliance and develops government chatbots for the Azure Government Cloud, Office 365, and SharePoint.
11-50 employees
Funding
Current Stage
Early StageLeadership Team
Manisha Griesinger, MPH, MSc
Program Manager | U.S. EPA Office of the Chief Financial Officer
Company data provided by crunchbase