Cyber Security Operations Analyst

MANTECH; Boulder (CO); On-site; USD 65,000 - 90,000; Full time

Job summary

MANTECH in Boulder, CO seeks a motivated Tier 1 Cybersecurity Analyst to join our Cybersecurity Operations Center (CSOC). This role provides 24/7/365 coverage to protect critical government infrastructure from threats and incidents.

The position requires 12-hour weekend night shifts and other shifts to total 40 hours weekly. Candidates should have a related degree, 0–2 years SOC experience, and familiarity with Windows/Linux and security tools.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, or a related field (or equivalent military/professional experience) preferred.
• 0-2 years of experience in a SOC, NOC, or technical support environment.
• Basic understanding of TCP/IP networking and common protocols.
• Familiarity with Windows and Linux operating systems.
• Exposure to security tools like Splunk, ArcSight, Sentinel or others is a plus.

Responsibilities

• Monitor security consoles and identify security platform alerts (SIEM, IDS/IPS, Firewall, etc.) for potential malicious activity.
• Perform initial analysis and triaging of security events to determine severity and impact.
• Maintain detailed logs of activity and create initial incident reports for escalation to incident responders and other team members.
• Review network traffic patterns and system logs to identify unauthorized access or anomalies.
• Assist with the health and maintenance checks of security tools and sensors.
• Coordinate with team members and shift leads to ensure a seamless handoff between night and day operations.

Skills

Networking basics

Windows familiarity

Linux familiarity

Incident analysis basics

Education

Bachelor's degree in Cybersecurity or related field

Tools

Splunk

ArcSight

Sentinel

Job description

MANTECH seeks a motivated, career and customer-oriented Tier 1 Cybersecurity Analyst to join our Cybersecurity Operations Center (CSOC) team in Boulder, CO. This role is vital for providing 24/7/365 coverage to protect critical government infrastructure.

Responsibilities Include But Not Limited To

• Monitor security consoles and identify security platform alerts (SIEM, IDS/IPS, Firewall, etc.) for potential malicious activity.
• Perform initial analysis and triaging of security events to determine severity and impact.
• Maintain detailed logs of activity and create initial incident reports for escalation to incident responders and other team members.
• Review network traffic patterns and system logs to identify unauthorized access or anomalies.
• Assist with the health and maintenance checks of security tools and sensors.
• Coordinate with team members and shift leads to ensure a seamless handoff between night and day operations.
• This position requires shifts that may include days, nights, and/or weekends to ensure continuous coverage. Examples include: Saturday & Sunday: 12-hour night shifts (8:00 PM - 8:00 AM). Weekdays: Two additional 8-hour shifts (to be scheduled) to complete a 40-hour work week. Monday - Friday: shifts may be 8am - 4pm, 4pm to 12 midnight, or 12 midnight to 8am.

Minimum Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, or a related field (or equivalent military/professional experience) is preferred.
• 0-2 years of experience in a SOC, NOC, or technical support environment.
• Basic understanding of TCP/IP networking and common protocols as well as:
• Familiarity with Windows and Linux operating systems.
• Exposure to security tools like Splunk, ArcSight, Sentinel or others is a plus.
• Basic understanding of Security alerts, logs, and event analysis.
• Basic understanding of common attack types (phishing, malware, brute force, lateral movement).
• Must be able to consistently work the 12-hour weekend night shift (Sat/Sun 8 PM - 8 AM) and/or other assigned shifts.

Preferred Qualifications

• Certifications: Security+, CySA+, GCIH, or similar is preferred.
• Active Top Secret clearance

Clearance Requirements

• Must be a US Citizen with a current/active secret clearance.

Physical Requirements

• Must be able to remain in a stationary position 50%
• Constantly operates a computer and other office productivity machinery, such as a calculator, copy machine and computer printer.