Job Abstract

Secure our Nation, Ignite your Future

We are looking for a highly skilled and experienced Cyber Security Analyst to join our team. As a Cyber Security Analyst, you will be responsible for directly managing security incidents (e.g., coordinate documentation, work efforts, resource utilization within the organization) from inception to final after-action reporting. that support our organization's business objectives.

Responsibilities include, but are not limited to:

• Performs as the technical expert.

• Interacts with senior external personnel on significant technical matters often requiring coordination between organizations.

• Directly manages security incidents (e.g., coordinate documentation, work efforts, resource utilization within the organization) from inception to final after-action reporting.

• Coordinates enterprise incident response efforts, including command and control functions, in response to cyber security incidents.

• Provides detection, identification, and reporting of possible cyber-attacks/intrusions, anomalous activities, and misuse activities.

• Characterizes and performs analysis of network traffic and system data to identify anomalous activity and potential threats to resources.

• Performs security event and incident correlation using information gathered from a variety of sources within the enterprise.

• Analyzes and assesses damage to the data / infrastructure as a result of cyber incidents.

• Writes and publishes cyber incident reports detailing incident findings and mitigation/remediation recommendations. 

• Develops and documents incident response guidance, processes, and procedures.

• Considered a Lead and may manage the work of others.

Position Requirements:

• Minimum Education: B.S. or 4+ years of equivalent experience in related field

• General Experience: 10+ years of related experience

• Experience working in a Cybersecurity Operations Center environment.

• Experience with COTS technologies used in a Cybersecurity Operations Center environment.

• CSSP-IR (GCIH, CSIH, or CEH) certification required within 6 months.

• IAT Level II (GSEC, Security+, SSCP, or CCNA-Security) certification required.

• Proficient in Windows and Linux operating systems.

• Working knowledge of current COTS Cybersecurity technologies.

• Working knowledge of database and operating system security.

• Understanding of latest security principles, techniques, and protocols.

Physical Requirements:

• Must be able to remain in a stationary position 50%

• Constantly operates a computer and other office productivity machinery, such as a calculator, copy machine and computer printer.

• The person in this position frequently communicates with co-workers, management, and customers, which may involve delivering presentations. Must be able to exchange accurate information in these situations.

Clearance Requirement:

Must possess an active TS/SCI w/CI polygraph.

#GL-SOC

For all positions requiring access to technology/software source code that is subject to export control laws, employment with the company is contingent on either verifying U.S.-person status or obtaining any necessary license. The applicant will be required to answer certain questions for export control purposes, and that information will be reviewed by compliance personnel to ensure compliance with federal law. ManTech may choose not to apply for a license for such individuals whose access to export-controlled technology or software source code may require authorization and may decline to proceed with an applicant on that basis alone.