Principal Cyber Security Engineer

MANTECH•Chantilly, VA

3h•$141,500 - $236,000•Onsite

About The Position

MANTECH is seeking a motivated, career- and customer-oriented Principal Cyber Security Engineer to join its team in Chantilly, Virginia. The role supports mission-critical cybersecurity operations by designing, deploying, and maintaining secure, resilient data collection and monitoring solutions that enable informed decision-making across the enterprise. An active TS/SCI with Polygraph clearance is required.

Requirements

Bachelor’s degree, or at least 4 additional years of cybersecurity experience in lieu of a degree.
At least 7 years of experience in a cybersecurity role.
Experience with Security Information and Event Management (SIEM) platforms and Splunk enterprise environments.
Knowledge of Linux systems administration, general operating system security practices, TCP/IP networking, and network security concepts.
Knowledge of Certification and Accreditation (C&A) processes and DoD technical security guidance for information systems.
DoD Directive 8570.1 IAT Level II or higher certification, or the ability to obtain it within 30 days of hire.
Active TS/SCI with Polygraph clearance.
Ability to remain stationary 50% of the time.
Ability to occasionally move around inside the office to access file cabinets, office machinery, and similar items.
Ability to communicate frequently with co-workers, management, and customers, including delivering presentations, and to exchange accurate information.

Nice To Haves

Splunk certification, such as Splunk Certified Administrator, Architect, or Power User.
Hands-on experience with Linux distributions including Red Hat and CentOS, and cloud environments such as AWS.
Knowledge of ICS 500-27 audit collection requirements and feed creation to ingest customer logs in standardized formats.
Familiarity with Enterprise Security Services, Host Based Security Services (HBSS), Enterprise Vulnerability Scanning Services, and User Activity Monitoring (UAM).

Responsibilities

Troubleshoot new and existing data collection issues to ensure accurate and reliable ingestion of security-relevant data.
Diagnose and resolve system issues that impact stability, performance, or usability.
Deploy, manage, and maintain supported and unsupported Splunk Add-ons required for specific data sources.
Develop and maintain documentation, including Body of Evidence (BOE) artifacts, engineering documentation, change management records, system security plans, and accreditation materials.
Deliver comprehensive Splunk deployment documentation detailing specifications, deployment methods, and architectural considerations for production environments.
Implement and maintain strict role-based access control to ensure data is accessible on a validated need-to-know basis.
Design and deploy Splunk forwarders using centralized configuration management through the Splunk Deployment Server to support rapid and consistent deployments.