Senior Cyber Security Detections Engineer bei ManTech

MANTECH seeks a motivated, career and customer-oriented Senior Cyber Security Detections Engineer to join our team in Chantilly, VA.This role supports our Cyber Operations mission by providing critical detection and response capabilities. You will be part of an industry-leading organization where employees come first, and you'll help defend national security while working on rewarding projects with room for growth and innovation.Responsibilities include but are not limited to:Formulating and publishing custom Security Information and Event Management (SIEM) tool content and IDS/IPS signatures to address threatsPerforming security event and incident correlation using information gathered from a variety of sources within the enterpriseAnalyzing and assessing damage to the data/infrastructure as a result of cyber incidentsPerforming cyber incident trend analysis and reportingCharacterizing and analyzing network traffic and system data to identify anomalous activity and potential threats to resourcesProviding detection, identification, and reporting of possible cyber-attacks/intrusions, anomalous activities, and misuse activitiesCreating, deploying, and implementing threat-based signatures and detection rules for operational intrusion detection capabilitiesMinimum Qualifications:Bachelor’s degree or 4+ years of additional cyber experience in lieu of a degree5+ years of cyber experienceExperience with modern Windows, UNIX, network operating systems, databases, and virtual computing environmentsDoD 8570 certification meeting IAT Level II (e.g., GSEC, Security+, SSCP, or CCNA-Security)Knowledge of counter-measures or mitigating controlsExperience with enterprise security tools, including SIEMs, Threat Intelligence Platforms (TIPs), or network monitoring toolsProficiency in creating, modifying, tuning IDS signatures/SIEM correlation searches and other detection signaturesPreferred Qualifications:Advanced skills in Linux/Unix (command line user—proficient and used in the last 6 months)Clearance Requirements:Must have a current/active TS/SCI with PolygraphPhysical Requirements:Must be able to remain in a stationary position 50% of the timeOccasionally move about inside the office to access file cabinets, office machinery, or to communicate with co-workers, management, and customers via email, phone, and/or virtual communication, which may involve delivering presentations Jetzt bewerben