Cyber Threat Hunt Analyst

MANTECH•McLean, VA

1d•$91,600 - $153,800•Onsite

About The Position

MANTECH seeks a motivated, career and customer-oriented Cyber Threat Hunter to join our team in Mclean, VA. In this role you will leverage your strong cybersecurity background and knowledge to proactively detect, investigate, and mitigate cyber threats within our large enterprise environment.

Requirements

High School Diploma and 2+ years of professional experience as a cyber security analyst, incident responder, or other closely related cyber security role
Experience with SIEM platforms, EDR solutions and network traffic analysis
Understanding of cloud environments (AWS, Azure, etc.)
An active TS/SCI with Polygraph is required for this position.

Nice To Haves

Bachelor’s degree in cyber security/information security, computer science, engineering, or other closely related IT discipline)
4+ years of professional experience in a cyber-security related capacity
Demonstrated understanding of or proficiency in using cyber threat hunting models, the MITRE ATT&CK framework, and mapping adversary TTPs to observed activities
Industry-relevant professional certifications (e.g., CISSP, GCIH, CThH, CySA+)

Responsibilities

Conducting proactive threat hunting using the HMM-4 approach and MITRE ATT&CK framework.
Developing and refining hypotheses for targeted threat hunts based on threat intelligence, internal data, and analysis of attacker tactics, techniques, and procedures (TTPs).
Collaborating with internal teams to collect and analyze security event data from various sources, such as logs, alerts, network traffic, and endpoint telemetry.
Utilizing cutting-edge tools and technologies to identify indicators of compromise (IOCs) and anomalies that may indicate potential threats.
Performing in-depth analysis of identified threats, assessing their impact, and recommending appropriate mitigation and response strategies.
Documenting investigative objectives and producing detailed reports on findings, including root cause analysis, recommendations for remediation, and enhanced detections where defensive gaps are identified.
Staying up to date with the latest cyber threats, attack techniques, and security technologies through continuous learning and knowledge sharing.