Principal Cyber Engineer

MANTECH seeks a motivated, mission-focused Principal Cyber Engineer to join our team in Chantilly, VA.

In this role, you will provide advanced engineering expertise to design, implement, secure, and sustain complex enterprise network environments supporting critical customer missions. You will collaborate across technical teams and customer stakeholders to deliver resilient, highly available, and secure network solutions while driving operational excellence and innovation.

Responsibilities include but are not limited to:

• Interact with engineers, cross-functional teams, and customers at multiple levels to gather, coordinate, and deliver technical information.
• Work closely with engineering teams to troubleshoot and build complex, highly available network topologies.
• Develop and manage data flow pipelines implementing complex extraction, transformation, and filtering to enhance user experience.
• Lead complex network troubleshooting and root cause analysis across enterprise, data center, cloud, and hybrid environments utilizing packet captures, routing analysis, traffic flow inspection, and protocol level diagnostics.
• Perform engineering support and system administration for applications and systems, including installation, configuration, maintenance, patching, and backup/restore activities.
• Provide Tier 2/3 maintenance and engineering support for cybersecurity technologies while supporting Assessment and Authorization (A&A) activities.
• Develop and implement automation solutions for repetitive project tasks and metrics collection using scripting to support testing and production deployment.

Minimum Qualifications:

• Bachelor’s degree or 4+ additional years of IT experience in lieu of degree.
• 7+ years of experience in cybersecurity with a focus on SIEM Engineering, log observability, and log forwarding.
• Proficiency in utilizing REGEX to filter or extract data.
• Experience operating and managing data pipelines with Cribl Stream or Cribl Edge in a production environment.
• Knowledge of log forwarding, indexing, data collection, search architecture, source types, and ingestion-time parsing.
• Must have or be willing to obtain an IAT Level II (or higher) certification within 30 days of hire.
• Must have or be willing to obtain Cribl Engineer Certification (CC Engineer) within 30 days of hire.

Preferred Qualifications:

• Knowledge of Cribl architecture and Cribl best practices with experience implementing in enterprise environments.
• Understanding of architectural principles such as defense in depth, resilience, and integrated security operations.
• Familiarity with federal cybersecurity guidance, including NIST SP 800-37 (Risk Management Framework) and NIST SP 800-137 (Information Security Continuous Monitoring).
• In-depth understanding and practical experience with Cribl, REGEX, and log forwarding in Agile environments.

Clearance Requirements:

• Must possess an active TS/SCI with Polygraph.

Physical Requirements:

• Must be able to remain in a stationary position 50% of the time.
• Needs to occasionally move about inside the office to access file cabinets, office machinery, etc.
• Frequently communicates with co-workers, management, and customers, which may involve delivering presentations. Must be able to exchange accurate information in these situations.