This is a full-time position with the Office of Information Technology at the Supreme Court of the United States in Washington, D.C. Closing Date: Tuesday, 09/08/2026, 11:59 PM ET Previous applicants do not need to reapply. Please note that this vacancy has a limit of 200 applicants. The job opportunity announcement will automatically close if that limit is reached prior to the closing date.
This position is a full-time position in the Office of Information Technology at the Supreme Court of the United States, in Washington, D.C. Under the guidance of the Court Information Security Officer, the incumbent will perform the full range of tasks and activities involved in developing, coordinating, implementing and maintaining standards, procedures and technical solutions to protect the confidentiality, integrity and availability of information systems and data.
The Tier-3 Cyber Incident Response Analyst protects the Court's systems and information by leading the detection, analysis, containment, and recovery efforts for cybersecurity incidents. This position must report on-site within the Washington DC area multiple times per week.
The incumbent will be responsible for the following duties: As a senior-level Tier 3 incident responder, perform analysis of alerts and event logs from a variety of sources (e.g., individual host logs, network traffic logs, firewall logs, and intrusion detection system logs) to identify possible threats to security; Analyze network traffic to identify anomalous activity and potential threats to network resources; As an Incident Response Team member, respond to threats and take mitigating actions to contain the malicious activity and minimize damage as well as facilitate forensics analysis to determine the source of the threat; As an Incident Commander, lead, track and document cyber incidents from initial detection through final resolution, in addition to capturing after-action items and lessons-learned; Participate in 24x7 on-call support rotation; Contribute to insider threat protection through behavioral monitoring, threat detection, and forensic investigation; Update and maintain the Incident Response Plan, playbooks, and standard operating procedures to ensure efficient and effective handling of security incidents aligned with evolving threat landscapes; Receive cyber threat intelligence material and, working with SIEM/Detection engineers, create actionable detections, alerts, and response guidance; Design and lead incident response tabletop exercises and attack simulations to test readiness and improve team coordination; Integrate and align the Incident Response program and capabilities with Court Continuity of Operations (COOP) planning and exercises; Contribute to the implementation, configuration, and continuous improvement of incident response tools and processes; Work with stakeholders at all levels of the organization to communicate the state of information security, inform of possible risks, and suggest ways to improve security; Make recommendations to senior management on results of analysis and work closely with other Information Technology groups to refine and enhance security controls; Support and contribute to the broader information security program initiatives, and other duties as assigned.
Candidate must have a technology related college degree and five years of demonstrated IT and cyber security related experience or seven years of demonstrated cyber security and IT experience.
hr@supremecourt.gov · (202) 479-3404
This position is with Supreme Court of the United States, Judicial Branch.
The posted pay range is $121785 – $187093/yr.
This position is eligible for telework.
This position requires a Top Secret security clearance.
Applications close on 2026-09-08.
This position is open under the 'Public' hiring path.
Source: USAJOBS.gov — U.S. Federal Government
Apply on official site →