Mantech

MANTECH seeks a motivated, career and customer-oriented Senior Cyber Threat Analyst to join our team in Springfield, VA.

This role supports advanced cybersecurity operations by leading proactive threat hunts and delivering timely, actionable intelligence. You will help shape defense strategies through analysis, reporting, and collaboration with system owners and cyber defenders.
 

Responsibilities include but are not limited to:

• Conducting proactive threat hunts to uncover previously undetected adversary behavior, performing in-depth host and network log analysis, and delivering systematic threat assessments
• Managing cyber intelligence requirements and focusing cyber intelligence collection efforts; identifying emerging cyber technologies, capabilities, or weapons which pose a threat to US or Allied systems
• Producing comprehensive cybersecurity reports, providing sourced and summarized threat intelligence, outlining threat hunt findings and limitations, and presenting recommendations to system owners, cyber defenders, and policy makers
• Researching known adversarial Tactics, Techniques, and Procedures (TTPs) to identify foundational components, isolate associated host or network events, and enable threat mitigation, detection, and response
• Creating custom cybersecurity dashboards to monitor host and network activity, enabling rapid identification of successful and unsuccessful intrusion attempts
• Performing analysis, correlation, and attribution of incidents to Advanced Persistent Threat (APT) groups
• Conducting research and analysis of APT infrastructure and malicious binaries, external cyber threat intelligence reporting, and production
   

Minimum Qualifications:

• Bachelor’s degree or 4+ additional years of cyber experience in lieu of a degree
• 5+ years of cybersecurity experience
• Experience with related security technology or disciplines such as Incidents and Warnings Management, Cybersecurity Operations, or Cybersecurity Engineering
• IAT Level II certification (GSEC, Security+, SSCP, or CCNA-Security)
   

Preferred Qualifications:

• Proficiency with MS Office and Security Information and Event Management (SIEM) tools
   

Clearance Requirements:

• Must have an active TS/SCI with Polygraph
   

Physical Requirements:

• The person in this position must be able to remain in a stationary position 50% of the time. Occasionally moves about inside the office to access file cabinets, office machinery, or to communicate with co-workers, management, and customers, via email, phone, and/or virtual communication, which may involve delivering presentations.