Senior Cyber Threat Analyst

MANTECH•Denver, CO

1d•$104,200 - $172,900•Onsite

About The Position

MANTECH is seeking a motivated, career- and customer-oriented Senior Cyber Threat Analyst to join its team in Denver, Colorado. The role supports national security and government intelligence agencies through cybersecurity threat analysis and related intelligence work. The position is onsite and requires an active TS/SCI clearance with polygraph. The analyst conducts proactive threat hunts and in-depth analysis of host, network, endpoint, and security telemetry to identify adversary activity. The role includes managing cyber intelligence requirements and collection, researching adversarial tactics and infrastructure, analyzing incidents and malicious binaries, and attributing activity to Advanced Persistent Threat (APT) groups. The analyst also produces threat intelligence reports and recommendations and creates dashboards to monitor activity and support detection and response. The projected compensation range is $104,200 to $172,900. MANTECH states that benefits may include health and life insurance, paid time off, holiday pay, short- and long-term disability, retirement and savings, learning and development opportunities, wellness programs, and other optional benefit elections, depending on position.

Requirements

Bachelor’s degree or at least four additional years of cyber experience in lieu of a degree.
At least 5 years of cybersecurity experience.
IAT Level II certification, such as GSEC, Security+, SSCP, or CCNA-Security.
Experience with related security technology or disciplines such as Incidents and Warnings Management, Cybersecurity Operations, or Cybersecurity Engineering.
Demonstrated experience conducting proactive threat hunts across host, network, endpoint, and security telemetry.
Experience analyzing system, network, endpoint, and security logs to identify anomalous activity, Indicators of Compromise (IOCs), and adversary behavior.
Experience conducting cyber threat intelligence analysis, including assessing adversary capabilities, intent, infrastructure, and potential impact.
Active TS/SCI clearance with polygraph.

Nice To Haves

Familiarity with SIEM and security analytics platforms such as Splunk, Microsoft Sentinel, Elastic, or similar technologies.
Experience using threat intelligence frameworks, standards, and methodologies such as MITRE ATT&CK, Cyber Kill Chain, or related frameworks.
Experience creating custom detection signatures, analytic rules, correlation logic, or threat-hunting queries.
Experience developing custom cybersecurity dashboards and visualizations to monitor host, network, and security activity.

Responsibilities

Conduct proactive threat hunts to uncover previously undetected adversary behavior, perform in-depth host and network log analysis, and deliver systematic threat assessments.
Manage cyber intelligence requirements and focus cyber intelligence collection efforts; identify emerging cyber technologies, capabilities, or weapons that pose a threat to U.S. or Allied systems.
Produce cybersecurity reports with sourced and summarized threat intelligence, threat-hunt findings and limitations, and recommendations for system owners, cyber defenders, and policy makers.
Research known adversarial Tactics, Techniques, and Procedures (TTPs) to identify foundational components, isolate related host or network events, and enable threat mitigation, detection, and response.
Create custom cybersecurity dashboards to monitor host and network activity and help identify successful and unsuccessful intrusion attempts.
Analyze, correlate, and attribute incidents to Advanced Persistent Threat (APT) groups.
Research and analyze APT infrastructure and malicious binaries, external cyber threat intelligence reporting, and production.