Principal Cybersecurity Engineer

MANTECH•Chandler, AZ

3d•$148,200 - $263,000•Onsite

About The Position

MANTECH seeks a motivated, career- and team-oriented Principal Cybersecurity Engineer for a future opportunity supporting a major federal homeland security program. The position is based in Washington, DC or Chandler, AZ in the description; the requisition’s listed locations are Chantilly, VA and Chandler, AZ. The engineer will serve as a senior technical authority driving enterprise-wide threat defense, operational resilience, and advanced security analytics for a large-scale federal Security Operations Center (SOC). The work includes advancing security operations through continuous threat exposure models, Zero Trust principles, and security automation.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field.
At least 5 years of specialized cybersecurity experience in enterprise or federal SOC environments.
At least one primary certification: CISSP (or Associate), CCSP, SSCP, GMON, GCIH, GCIA, CEH, or CASP+.
At least one secondary certification from the DoD 8140 CSSP Analyst, Infrastructure Support, or Incident Responder list.
Hands-on experience with security event correlation tools, digital forensics, and binary analysis.
Active Secret clearance; must be eligible to obtain and maintain a Top Secret/SCI clearance.
U.S. citizenship and ability to obtain and maintain agency suitability/EOD before starting.
Must be able to remain in a stationary position 50% of the time and occasionally move about inside the office to access file cabinets or office machinery, or communicate with co-workers and customers.

Nice To Haves

Master’s degree in a technical discipline.
Direct experience supporting federal cyber defense operations for DHS, DoD, or the Intelligence Community.
Practical knowledge of Zero Trust Architecture implementation and cloud-native security controls.

Responsibilities

Implement, optimize, and tune comprehensive offensive and defensive security capabilities across complex, enterprise-scale environments.
Lead end-to-end incident handling, including scoping, timeline reconstruction, root cause analysis, and impact assessment across cloud, network, endpoint, and mobile infrastructures.
Perform static and dynamic malware reverse engineering, including sandboxing and code analysis, to extract Indicators of Compromise and analyze command-and-control infrastructure.
Align security architecture, detection tools, and incident telemetry with MITRE ATT&CK and D3FEND frameworks.
Correlate digital forensics findings with threat intelligence, SOC alerts, and adversary Tactics, Techniques, and Procedures.
Provide expert guidance on network security architecture, operating system hardening, and multi-cloud security posture management.