Job description

Shape the future of defense with MANTECH! Join a team dedicated to safeguarding our nation through advanced tech and innovative solutions. Since 1968, we’ve been a trusted partner to the Department of Defense, delivering cutting-edge projects that make a real impact. Dive into exciting opportunities in Cybersecurity, IT, Data Analytics and more. Propel your career forward and be part of something extraordinary. Your journey starts now—protect and innovate with MANTECH! MANTECH is seeking a motivated, career and customer-oriented Cybersecurity Triage Analyst to join our team in Lorton, VA. As a SOC Cybersecurity Triage Analyst, you will be responsible for providing full-time support to a large enterprise Department of Defense customer. The coreresponsibility is to conduct initial triage and analysis of cyber threat reports andalerts to protect infrastructure and data. This role involves monitoring alert queuesfor sensitive assets and known attacker campaigns, performing automated andmanual remediation of adverse events, and ensuring the health of signal ingestionacross Microsoft and third-party tools. The Analyst will work closely with other teams to escalate incidents and recommend improvements to response techniquesand automation playbook. Responsibilities include but are not limited to: • Alert Prioritization and Triage: Focuses on the monitoring, initial triage,managing, and reviewing incidents to assess their urgency, and escalatingincidents if necessary. • Signal Ingestion Health: Monitors and diagnoses the health of signalingestion to ensure that alerts are properly received and processed. • Daily Security Checks: Performs daily checks of security tools to maintainthe health and functionality of security tools. • Incident Investigation, Response, and Remediation: Conducts andparticipates in initial investigation, incident response, remediation, anddocumentation of security incidents and enforces cybersecuritypolicies/SOPs. • Root-Cause Analysis and Escalation: Performs initial root-cause analysis toreconcile technical details (5Ws) obtained from various sources. Escalatesincidents for advanced investigation and remediation for more complexissues. • Triage analysts may be involved in various investigation types includingmalicious adversarial actions, common IOC remediation, Insider ThreatInquiries. Minimum Qualifications: • Bachelor’s degree and at least 2 years of hands-on experience in security operations, incident response, or cybersecurity threat management. An additional 2 years of experience may be substituted in lieu of a degree. • Current DoD 8570/8140 IAT Level 2 certification • Fundamental experience and proficiency with querying languages (KQL, SQL, SPL, etc.). • Knowledge and/or experience protecting network environments againstexternal and insider threats. • Experience completing and analyzing SCAP Vulnerability scans. • Familiarity with Common Vulnerabilities and Exposures (CVE) tracking andremediation. • Fundamental understanding of security in cloud environments (e.g. Azure, AWS, GCP, Oracle). Preferred Qualifications: • Fundamental understanding of advanced persistent threats (APT) andassociated tactics, attack frameworks (e.g., MITRE ATT&CK, Cyber KillChain), credential compromise techniques, technology and securityprinciples, and knowledge of the cyber threat landscape. • Knowledge or experience with Splunk Enterprise, HBSS, ACAS, MicrosoftSentinel, or similar tools. • Hands-on experience with SIEM, SOAR, XDR, and/or enterprise vulnerability management tools. • CSSP Analyst Certifications highly desired (Ex. GCIA, GCIH, Cloud+, CEH) Clearance Requirements: • Must have an current/active Top-Secret Clearance with SCI Eligibility. Physical Requirements: • Sedentary Work The projected compensation range for this position is $91,600.00-$153,800.00. There are differentiating factors that can impact a final salary/hourly rate, including, but not limited to, Contract Wage Determination, relevant work experience, skills and competencies that align to the specified role, geographic location (For Remote Opportunities), education and certifications as well as Federal Government Contract Labor categories. In addition, MANTECH invests in its employees beyond just compensation. MANTECH’s benefits offerings include, dependent upon position, Health Insurance, Life Insurance, Paid Time Off, Holiday Pay, short-term and long-term Disability, Retirement and Savings, Learning and Development opportunities, wellness programs as well as other optional benefit elections. MANTECH considers all qualified applicants for employment without regard to disability or veteran status or any other status protected under any federal, state, or local law or regulation. If you need a reasonable accommodation to apply for a position with MANTECH, please email us at careers@mantech.com and provide your name and contact information.

Requirements

Must-haves

MANTECH is seeking a motivated, career and customer-oriented Cybersecurity Triage Analyst to join our team in Lorton, VA.
Alert Prioritization and Triage: Focuses on the monitoring, initial triage,managing, and reviewing incidents to assess their urgency, and escalatingincidents if necessary.
Signal Ingestion Health: Monitors and diagnoses the health of signalingestion to ensure that alerts are properly received and processed.
Daily Security Checks: Performs daily checks of security tools to maintainthe health and functionality of security tools.
Incident Investigation, Response, and Remediation: Conducts andparticipates in initial investigation, incident response, remediation, anddocumentation of security incidents and enforces cybersecuritypolicies/SOPs.
Triage analysts may be involved in various investigation types includingmalicious adversarial actions, common IOC remediation, Insider ThreatInquiries.
Bachelor’s degree and at least 2 years of hands-on experience in security operations, incident response, or cybersecurity threat management. An additional 2 years of experience may be substituted in lieu of a degree.
Current DoD 8570/8140 IAT Level 2 certification
Fundamental experience and proficiency with querying languages (KQL, SQL, SPL, etc.).
Knowledge and/or experience protecting network environments againstexternal and insider threats.
Experience completing and analyzing SCAP Vulnerability scans.
Familiarity with Common Vulnerabilities and Exposures (CVE) tracking andremediation.
Fundamental understanding of security in cloud environments (e.g. Azure, AWS, GCP, Oracle).
Must have an current/active Top-Secret Clearance with SCI Eligibility.
Sedentary Work
MANTECH considers all qualified applicants for employment without regard to disability or veteran status or any other status protected under any federal, state, or local law or regulation.
If you need a reasonable accommodation to apply for a position with MANTECH, please email us at careers@mantech.com and provide your name and contact information.

Nice-to-haves

Knowledge or experience with Splunk Enterprise, HBSS, ACAS, MicrosoftSentinel, or similar tools.
Hands-on experience with SIEM, SOAR, XDR, and/or enterprise vulnerability management tools.
CSSP Analyst Certifications highly desired (Ex. GCIA, GCIH, Cloud+, CEH)

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

sqlazureawsgcp

Platform: avature
Effort: medium

Benefits

Benefits detected in the listing.

Health Insurance

Paid Time Off

Wellness