Principal Cyber Threat Analyst

MANTECH seeks a motivated, career and customer-oriented Principal Cyber Threat Analyst to join our team in Denver, CO.

Responsibilities include but are not limited to:

• Conducting proactive threat hunts to uncover previously undetected adversary behavior, performing in-depth host and network log analysis, and delivering systematic threat assessments
• Managing cyber intelligence requirements and focusing cyber intelligence collection efforts; identifying emerging cyber technologies, capabilities, or weapons which pose a threat to US or Allied systems
• Producing comprehensive cybersecurity reports, providing sourced and summarized threat intelligence, outlining threat hunt findings and limitations, and presenting recommendations to system owners, cyber defenders, and policy makers
• Researching known adversarial Tactics, Techniques, and Procedures (TTPs) to identify foundational components, isolate associated host or network events, and enable threat mitigation, detection, and response
• Creating custom cybersecurity dashboards to monitor host and network activity, enabling rapid identification of successful and unsuccessful intrusion attempts
• Performing analysis, correlation, and attribution of incidents to Advanced Persistent Threat (APT) groups
• Conducting research and analysis of APT infrastructure and malicious binaries, external cyber threat intelligence reporting, and production

Minimum Qualifications:

• Bachelor’s degree or 4+ additional years of cyber experience in lieu of a degree
• 5+ years of cybersecurity experience
• IAT Level II certification (GSEC, Security+, SSCP, or CCNA-Security)
• Experience with related security technology or disciplines such as Incidents and Warnings Management, Cybersecurity Operations, or Cybersecurity Engineering
• Demonstrated experience conducting proactive threat hunts across host, network, endpoint, and security telemetry.
• Experience analyzing system, network, endpoint, and security logs to identify anomalous activity, Indicators of Compromise (IOCs), and adversary behavior.
• Experience conducting cyber threat intelligence analysis, including assessing adversary capabilities, intent, infrastructure, and potential impact.

Preferred Qualifications:

• Familiarity with SIEM and security analytics platforms such as Splunk, Microsoft Sentinel, Elastic, or similar technologies.
• Experience using threat intelligence frameworks, standards, and methodologies such as MITRE ATT&CK, Cyber Kill Chain or related frameworks.
• Experience creating custom detection signatures, analytic rules, correlation logic, or threat-hunting queries.
• Experience developing custom cybersecurity dashboards and visualizations to monitor host, network, and security activity.

Clearance Requirements:

• Must have an active TS/SCI w/Polygraph

Physical Requirements:

• The person in this position must be able to remain in a stationary position 50% of the time. Occasionally move about inside the office to access file cabinets, office machinery, or to communicate with co-workers, management, and customers, via email, phone, and or virtual communication, which may involve delivering presentations.