Senior Cybersecurity Engineer

General information

Requisition # R59892 Locations USA-WV-Clarksburg, USA-AL-Huntsville Posting Date 04/17/2025 Security Clearance Required Top Secret Remote Type Onsite Time Type Full time

Description & Requirements

Transform the future of federal services with ManTech! Join a vibrant, energetic team committed to enhancing national security and public services through innovative tech. Since 1968, we’ve partnered with Federal Civilian sectors to deliver impactful solutions. Engage in exciting projects in Digital Transformation, Cybersecurity, IT, Data Analytics and more. Ignite your career and drive change. Your journey starts now—innovate and excel with ManTech!

ManTech seeks a highly skilled and knowledgeable Senior Cybersecurity Engineer to support a 24x7x365 Watch Floor team and safeguard the confidentiality, integrity, and availability of an organization's information assets. This position is located on customer site in Huntsville, AL or Clarksburg, WV.

Responsibilities include but are not limited to:

• Develop, upgrade, and enhance the enterprise Security Information and Event Monitoring (SIEM) strategy and tool implementation via Splunk, design data flow diagrams, and alert feed architectures to ensure seamless alert integration

• Develop and maintain SIEM architecture including data sources, log management, and alerting mechanisms

• Configure tools, settings, alerts, and notifications to improve the enterprise security and resilience capabilities, including implementation of Security Orchestration and Automation for Response (SOAR) and Endpoint Detection and Response (EDR) capabilities

• Develop content for rule implementation on network border devices (firewalls, routers, switches, IDS/IPS, Taclanes, etc.)

• Monitor security events and alerts and conduct detailed analysis to identify potential security incidents

• Participates in response activities to all major enterprise outages. Provide technical guidance and support to junior analysts and other team members. Stay current with the latest SIEM technologies, cyber threats, and best practices

• Work and collaborate with incident response teams to investigate and remediate security incidents.

Minimum Qualifications:

• Bachelor's degree, preferably in an IT-related or cybersecurity discipline.

• 10+ years of IT-related experience

• 3+ years of hands-on experience with Splunk

• 2+ years of hands-on experience with Crowdstrike EDR or Palto Alto XDR

• Experience in developing and tuning SIEM and EDR use cases, correlation rules, and alerts

• Strong understanding of network protocols, system logs, and security event correlation

• Experience working with incident response teams for triaging and analysis

 Preferred Qualifications:

• 5+ years of experience in cybersecurity

• Experience using Microsoft Sentinel

• Preferred Certifications:

  • GIAC