Cybersecurity Operations Lead: Incident Response Automation

MANTECH; McLean (VA); On-site; USD 120,000 - 200,000; Full time

Job summary

MANTECH in McLean, VA seeks a Cybersecurity Operations Specialist to lead incident response and run security operations across multi-cloud environments. You will balance hands-on investigations with governance, reporting, and contract compliance while guiding a team of security professionals.

Responsibilities span escalation, forensics, detection automation, exercises, and leadership oversight. A TS/SCI with poly is required for clearance, with extensive experience in cyber defense and program

Qualifications

• High School Diploma and 10+ years of cybersecurity experience.
• 5+ years of experience in cyber defense operations, incident response, or CSOC environments.
• 3+ years of experience in management or team leadership overseeing technical staff, schedules, and administrative deliverables.
• Experience leading complex incident response investigations across multi-cloud and enterprise architectures.

Responsibilities

• Lead end-to-end incident investigations across cloud and enterprise architectures as tier-3 escalation lead for complex threats.
• Architect automated playbooks, integrate threat intelligence, and leverage AI within SIEM/EDR to improve detection and workflows.
• Design and execute readiness exercises, threat hunting, and maintain toolsets and failover procedures for alternate-site operations.

Skills

Incident response

Forensic analysis

Threat detection

Automation engineering

Leadership

RBAC governance

Education

High School Diploma

Tools

SIEM

EDR

Cloud security

Compliance

Job description

MANTECH in McLean, VA seeks a Cybersecurity Operations Specialist to lead incident response and run security operations across multi-cloud environments. You will balance hands-on investigations with governance, reporting, and contract compliance while guiding a team of security professionals.

Responsibilities span escalation, forensics, detection automation, exercises, and leadership oversight. A TS/SCI with poly is required for clearance, with extensive experience in cyber defense and program