What are the responsibilities and job description for the Cyber Threat Hunt Analyst position at MANTECH?
MANTECH seeks a motivated, career and customer-oriented Cyber Threat Hunter to join our team in Mclean, VA. In this role you will leverage your strong cybersecurity background and knowledge to proactively detect, investigate, and mitigate cyber threats within our large enterprise environment.
Responsibilities Include But Are Not Limited To
Responsibilities Include But Are Not Limited To
- Conducting proactive threat hunting using the HMM-4 approach and MITRE ATT&CK framework.
- Developing and refining hypotheses for targeted threat hunts based on threat intelligence, internal data, and analysis of attacker tactics, techniques, and procedures (TTPs).
- Collaborating with internal teams to collect and analyze security event data from various sources, such as logs, alerts, network traffic, and endpoint telemetry.
- Utilizing cutting-edge tools and technologies to identify indicators of compromise (IOCs) and anomalies that may indicate potential threats.
- Performing in-depth analysis of identified threats, assessing their impact, and recommending appropriate mitigation and response strategies.
- Documenting investigative objectives and producing detailed reports on findings, including root cause analysis, recommendations for remediation, and enhanced detections where defensive gaps are identified.
- Staying up to date with the latest cyber threats, attack techniques, and security technologies through continuous learning and knowledge sharing.
- High School Diploma and 2 years of professional experience as a cyber security analyst, incident responder, or other closely related cyber security role
- Experience with SIEM platforms, EDR solutions and network traffic analysis
- Understanding of cloud environments (AWS, Azure, etc.)
- Bachelor’s degree in cyber security/information security, computer science, engineering, or other closely related IT discipline)
- 4 years of professional experience in a cyber-security related capacity
- Demonstrated understanding of or proficiency in using cyber threat hunting models, the MITRE ATT&CK framework, and mapping adversary TTPs to observed activities
- Industry-relevant professional certifications (e.g., CISSP, GCIH, CThH, CySA )
- An active TS/SCI with Polygraph is required for this position.
- Must be able to remain in a stationary position 50% of the time