Cyber Threat Hunter

Apply Now

MANTECH seeks a motived, career and customer-oriented Cyber Thre Hunter to join our team in Mclean, VA.

The Cyber Thre Hunter will leverage their strong technical background and knowledge to proactively detect, investige, and mitige cyber thres within our large enterprise environment.

Responsibilities include but are not limited to:

• Conducting proactive thre hunting using the HMM-4 approach and MITRE ATT&CK framework.
• Developing and refining hypotheses for targeted thre hunts based on thre intelligence, internal da, and analysis of tacker tactics, techniques, and procedures (TTPs).
• Collaboring with internal teams to collect and analyze security event da from various sources, such as logs, alerts, network traffic, and endpoint telemetry.
• Utilizing cutting-edge tools and technologies to identify indicors of compromise (IOCs) and anomalies th may indice potential thres.
• Performing in-depth analysis of identified thres, assessing their impact, and recommending approprie mitigion and response stregies.
• Documenting investigive objectives and producing detailed reports on findings, including root cause analysis, recommendions for remediion, and enhanced detections where defensive gaps are identified.
• Staying up to de with the lest cyber thres, tack techniques, and security technologies through continuous learning and knowledge sharing.

Minimum Qualificions:

• 2+ years of professional experience as a cyber security analyst, incident responder, and/or other closely reled cyber security discipline.
• Experience with SIEM plforms, EDR solutions, network traffic analysis, and an understanding of cloud environments (AWS, Azure, etc.).
• Experience with problem-solving skills with the ability to transle complex technical findings in a clear, complete, and accure manner for technical and non-technical audiences.
• Relevant industry certificions and a solid foundion in network protocols and Microsoft Windows endpoint security.

Preferred Qualificions:

• Bachelor’s degree in cyber security/informion security, computer science, engineering, or other closely reled IT discipline).
• 4+ years of professional experience in a cyber-security reled capacity.
• Demonstred understanding of or proficiency in using cyber thre hunting models, the MITRE ATT&CK framework, and mapping adversary TTPs to observed activities.
• More advanced industry-relevant professional certificions (e.g., CISSP, GCIH, CThH, CySA+).

Clearance Requirements:

• An active TS/SCI with Polygraph is required for this position.

Physical Requirements:

• Must be able to remain in a stionary position 50%.
• Needs to occasionally move about inside the office to access file cabinets, office machinery, etc.
• Frequently communices with co-workers, management, and customers, which may involve delivering presentions.
• Must be able to exchange accure informion in these situions.

Apply Now