Cyber Hunt Analyst

MANTECH; McLean (VA); On-site; USD 90,000 - 130,000; Full time

Job summary

MANTECH seeks a motivated Cyber Threat Hunter to join our team in McLean, VA. Leverage your cybersecurity background to detect, investigate, and mitigate threats within a large enterprise environment.

Responsibilities include proactive threat hunting, hypothesis development, data analysis from multiple sources, and producing detailed reports with root cause analysis and remediation recommendations. Active TS/SCI not required here; candidates should have strong security chops and willingness to

Qualifications

• 2+ years of professional experience in cyber security, incident response, or related role.
• Experience with SIEM platforms, EDR, and network traffic analysis.
• Understanding of cloud environments (AWS, Azure, etc.).

Responsibilities

• Proactively hunt threats using the HMM-4 approach and MITRE ATT&CK framework.
• Develop hypotheses for targeted threat hunts from threat intel and internal data.
• Collaborate with teams to collect and analyze security data from logs, alerts, and endpoints.
• Use advanced tools to identify IOCs and anomalies indicating threats.
• Analyze threats and recommend remediation and enhanced detections.

Skills

Threat hunting

MITRE ATT&CK

SIEM platforms

EDR solutions

Network traffic analysis

Cloud environments (AWS/Azure)

Threat intelligence

Education

Bachelor’s degree in cyber security / information security / related IT field

Job description

MANTECH seeks a motivated, career and customer-oriented Cyber Threat Hunter to join our team in Mclean, VA. In this role you will leverage your strong cybersecurity background and knowledge to proactively detect, investigate, and mitigate cyber threats within our large enterprise environment.

Responsibilities Include But Are Not Limited To

• Conducting proactive threat hunting using the HMM-4 approach and MITRE ATT&CK framework.
• Developing and refining hypotheses for targeted threat hunts based on threat intelligence, internal data, and analysis of attacker tactics, techniques, and procedures (TTPs).
• Collaborating with internal teams to collect and analyze security event data from various sources, such as logs, alerts, network traffic, and endpoint telemetry.
• Utilizing cutting-edge tools and technologies to identify indicators of compromise (IOCs) and anomalies that may indicate potential threats.
• Performing in-depth analysis of identified threats, assessing their impact, and recommending appropriate mitigation and response strategies.
• Documenting investigative objectives and producing detailed reports on findings, including root cause analysis, recommendations for remediation, and enhanced detections where defensive gaps are identified.
• Staying up to date with the latest cyber threats, attack techniques, and security technologies through continuous learning and knowledge sharing.

Minimum Qualifications

• High School Diploma and 2+ years of professional experience as a cyber security analyst, incident responder, or other closely related cyber security role
• Experience with SIEM platforms, EDR solutions and network traffic analysis
• Understanding of cloud environments (AWS, Azure, etc.)

Preferred Qualifications

• Bachelor’s degree in cyber security/information security, computer science, engineering, or other closely related IT discipline)
• 4+ years of professional experience in a cyber-security related capacity
• Demonstrated understanding of or proficiency in using cyber threat hunting models, the MITRE ATT&CK framework, and mapping adversary TTPs to observed activities
• Industry-relevant professional certifications (e.g., CISSP, GCIH, CThH, CySA+)

Clearance Requirements

• An active TS/SCI with Polygraph is required for this position.

Physical Requirements

• Must be able to remain in a stationary position 50% of the time