Cyber Security Analyst, Principal

Secure our Nation, Ignite your Future

We are looking for a highly skilled and experienced Cyber Security Analyst, Principal to join our team. You will be responsible for directly managing security incidents (e.g., coordinate documentation, work efforts, resource utilization within the organization) from inception to final after-action reporting. that support our organization’s business objectives.

Responsibilities include, but are not limited to:

·       Performs as the technical expert.

·       Interacts with senior external personnel on significant technical matters often requiring coordination between organizations.

·       Directly manages security incidents (e.g., coordinate documentation, work efforts, resource utilization within the organization) from inception to final after-action reporting.

·       Coordinates enterprise incident response efforts, including command and control functions, in response to cyber security incidents.

·       Provides detection, identification, and reporting of possible cyber-attacks/intrusions, anomalous activities, and misuse activities.

·       Characterizes and performs analysis of network traffic and system data to identify anomalous activity and potential threats to resources.

·       Performs security event and incident correlation using information gathered from a variety of sources within the enterprise.

·       Analyzes and assesses damage to the data / infrastructure as a result of cyber incidents.

·       Writes and publishes cyber incident reports detailing incident findings and mitigation/remediation recommendations. 

·       Develops and documents incident response guidance, processes, and procedures.

·       Considered a Lead and may manage the work of others.

Position Requirements:

·       B.S. or relevant experience in related field

·       General Experience: 7+ years of related experience

·       Experience working in a Cybersecurity Operations Center environment.

·       Experience with COTS technologies used in a Cybersecurity Operations Center environment.

·       CSSP-IR (GCIH, CSIH, or CEH) certification required within 6 months.

·       IAT Level II (GSEC, Security+, SSCP, or CCNA-Security) certification required.

·       Proficient in Windows and Linux operating systems.

·       Working knowledge of current COTS Cybersecurity technologies.

·       Working knowledge of database and operating system security.

·       Understanding of latest security principles, techniques, and protocols.

Physical Requirements:

·       Must be able to remain in a stationary position 50%

·       Constantly operates a computer and other office productivity machinery, such as a calculator, copy machine and computer printer.

·      

Clearance Requirement:

Must possess an active TS/SCI w/ polygraph.

#GL-SOC

The projected compensation range for this position is $134,700-$224,700. There are differentiating factors that can impact a final salary/hourly rate, including, but not limited to, Contract Wage Determination, relevant work experience, skills and competencies that align to the specified role, geographic location (For Remote Opportunities), education and certifications as well as Federal Government Contract Labor categories. In addition, ManTech invests in it’s employees beyond just compensation. ManTech’s benefits offerings include, dependent upon position, Health Insurance, Life Insurance, Paid Time Off, Holiday Pay, Short Term and Long Term Disability, Retirement and Savings, Learning and Development opportunities, wellness programs as well as other optional benefit elections.

For all positions requiring access to technology/software source code that is subject to export control laws, employment with the company is contingent on either verifying U.S.-person status or obtaining any necessary license. The applicant will be required to answer certain questions for export control purposes, and that information will be reviewed by compliance personnel to ensure compliance with federal law. ManTech may choose not to apply for a license for such individuals whose access to export-controlled technology or software source code may require authorization and may decline to proceed with an applicant on that basis alone.