Cyber Security Operations Analyst

MANTECH; Boulder (CO); On-site; USD 70,000 - 100,000; Full time

Job summary

MANTECH invites applications for a Tier 1 Cybersecurity Analyst in Boulder, CO to join our CSOC and provide 24/7/365 coverage to protect critical government infrastructure. The role requires monitoring security consoles, triaging events, and coordinating with shifts to ensure seamless handoffs.

Candidates should have a degree in a related field and exposure to security tools; weekend night shifts are required as part of a 40-hour week.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, or a related field (or equivalent military/professional experience) is preferred.
• 0-2 years of experience in a SOC, NOC, or technical support environment.
• Basic understanding of TCP/IP networking and common protocols.
• Familiarity with Windows and Linux operating systems.
• Exposure to security tools like Splunk, ArcSight, Sentinel or others is a plus.
• Basic understanding of Security alerts, logs, and event analysis.
• Basic understanding of common attack types (phishing, malware, brute force, lateral movement).
• Must be able to consistently work the 12-hour weekend night shift (Sat/Sun 8 PM - 8 AM) and/or other assigned shifts.

Responsibilities

• Monitor security consoles and identify security platform alerts (SIEM, IDS/IPS, Firewall, etc.) for potential malicious activity.
• Perform initial analysis and triaging of security events to determine severity and impact.
• Maintain detailed logs of activity and create initial incident reports for escalation to incident responders and other team members.
• Review network traffic patterns and system logs to identify unauthorized access or anomalies.
• Assist with the health and maintenance checks of security tools and sensors.
• Coordinate with team members and shift leads to ensure a seamless handoff between night and day operations.
• This position requires shifts that may include days, nights, and/or weekends to ensure continuous coverage. Examples include: Saturday & Sunday: 12-hour night shifts (8:00 PM - 8:00 AM). Weekdays: Two additional 8-hour shifts (to be scheduled) to complete a 40-hour work week. Monday - Friday: shifts may be 8am - 4pm, 4pm to 12 midnight, or 12 midnight to 8am.

Job description

MANTECH seeks a motivated, career and customer-oriented Tier 1 Cybersecurity Analyst to join our Cybersecurity Operations Center (CSOC) team in Boulder, CO. This role is vital for providing 24/7/365 coverage to protect critical government infrastructure.

Responsibilities Include But Not Limited To

• Monitor security consoles and identify security platform alerts (SIEM, IDS/IPS, Firewall, etc.) for potential malicious activity.
• Perform initial analysis and triaging of security events to determine severity and impact.
• Maintain detailed logs of activity and create initial incident reports for escalation to incident responders and other team members.
• Review network traffic patterns and system logs to identify unauthorized access or anomalies.
• Assist with the health and maintenance checks of security tools and sensors.
• Coordinate with team members and shift leads to ensure a seamless handoff between night and day operations.
• This position requires shifts that may include days, nights, and/or weekends to ensure continuous coverage. Examples include: Saturday & Sunday: 12-hour night shifts (8:00 PM - 8:00 AM). Weekdays: Two additional 8-hour shifts (to be scheduled) to complete a 40-hour work week. Monday - Friday: shifts may be 8am - 4pm, 4pm to 12 midnight, or 12 midnight to 8am.

Minimum Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, or a related field (or equivalent military/professional experience) is preferred.
• 0-2 years of experience in a SOC, NOC, or technical support environment.
• Basic understanding of TCP/IP networking and common protocols as well as:
• Familiarity with Windows and Linux operating systems.
• Exposure to security tools like Splunk, ArcSight, Sentinel or others is a plus.
• Basic understanding of Security alerts, logs, and event analysis.
• Basic understanding of common attack types (phishing, malware, brute force, lateral movement).
• Must be able to consistently work the 12-hour weekend night shift (Sat/Sun 8 PM - 8 AM) and/or other assigned shifts.

Preferred Qualifications

• Certifications: Security+, CySA+, GCIH, or similar is preferred.
• Active Top Secret clearance

Clearance Requirements

• Must be a US Citizen with a current/active secret clearance.

Physical Requirements

• Must be able to remain in a stationary position 50%
• Constantly operates a computer and other office productivity machinery, such as a calculator, copy machine and computer printer.