Cyber Security Analyst, Staff

ManTech - Springfield, VA

Full-time - Mid Level

Springfield, VA

Professional, Scientific, and Technical Services

About the position

As a Cyber Security Analyst at ManTech International Corporation, you will play a crucial role in safeguarding our national security by detecting, identifying, and reporting potential cyber threats and intrusions. This position is integral to our Cybersecurity Operations Center, where you will analyze network traffic and system data to identify anomalous activities that could pose risks to our resources. You will be responsible for performing security event and incident correlation, utilizing information gathered from various sources within the enterprise to ensure a comprehensive understanding of the security landscape. Your duties will include conducting cyber incident triage, where you will assess the scope, urgency, and potential impact of incidents, identify specific vulnerabilities, and make recommendations for swift remediation. You will track and document cyber incidents from their initial detection through to final resolution, ensuring that all actions taken are recorded accurately. Additionally, you will analyze and assess the damage to data and infrastructure resulting from cyber incidents, providing valuable insights through trend analysis and reporting. This position requires a commitment to 24x7 shift work, with a 4/10 shift schedule that varies based on location. You will be part of a diverse team dedicated to innovative projects that not only protect our nation but also offer opportunities for professional advancement.

Responsibilities

• Provides detection, identification, and reporting of possible cyber-attacks/intrusions, anomalous activities, and misuse activities
• Characterizes and performs analysis of network traffic and system data to identify anomalous activity and potential threats to resources
• Performs security event and incident correlation using information gathered from a variety of sources within the enterprise
• Performs cyber incident triage to include determining scope, urgency, and potential impact; identify the specific vulnerability and make recommendations which enable expeditious remediation
• Tracks and documents cyber incidents from initial detection through final resolution
• Analyzes and assesses damage to the data / infrastructure as a result of cyber incidents
• Performs cyber incident trend analysis and reporting

Requirements

• Minimum Education: B.S. or equivalent experience in related field
• Minimum 2 years of relevant experience
• CSSP-IR certification required (CEH preferred)
• IAT Level II (GSEC, Security+, SSCP, or CCNA-Security) certification required
• Proficient in Windows and Linux operating systems
• Experience working in a Cybersecurity Operations Center environment desired
• Experience with COTS technologies used in a Cybersecurity Operations Center environment desired
• Working knowledge of current COTS Cybersecurity technologies
• Working knowledge of database and operating system security
• Understanding of latest security principles, techniques, and protocols

Nice-to-haves

• Ability to function in a fast-paced environment and effectively manage multiple tasks simultaneously; coordinating resources and ensuring scheduled goals are met
• Excellent verbal and written communication skills are required
• Ability to effectively interact with various levels of senior management is necessary
• Ability to make decisions and resolve problems effectively - Seek out information and data to evaluate, prioritize and formulate best solution or practice
• Must be able to multi-task, work independently and as part of a team, share workloads, and deal with sudden shifts in project priorities