Junior Cyber Security Threat Hunter

ManTech; Herndon (VA); On-site; USD 70,000 - 90,000; Full time

Job summary

A leading cybersecurity firm is seeking a motivated Junior Cybersecurity Threat Hunter in the DMV area. This role involves identifying and mitigating advanced cyber threats and collaborating with incident response teams. Ideal candidates will have a bachelor's degree in a related field and relevant experience, with opportunities for career growth in a dynamic environment.

Qualifications

• Relevant certifications such as CISSP, GCIH, GCFA, GCIA are desirable.
• 1+ years of relevant experience in cybersecurity.
• 8570 compliant certifications are required.

Responsibilities

• Collaborate with incident response teams to analyze and remediate threats.
• Conduct malware analysis including advanced persistent threats (APTs).
• Monitor network traffic and analyze logs for anomalies.

Skills

Threat analysis

Incident response

Malware analysis

Network security

Education

Bachelor’s degree in Computer Science, Information Technology or Cybersecurity

Tools

Splunk

ELK Stack

CrowdStrike

Carbon Black

Job description

**ManTech** seeks a motivated, career and customer-oriented **Junior** **Cybersecurity** **Threat Hunter** to join our team in the **DC, Maryland, and Virginia (DMV) area** .

The ideal candidate will be adept at identifying, analyzing, and mitigating advanced cyber threats. In this role you will respond to crisis or urgent situations to mitigate immediate and potential threats. Approaches may include the use information and threat intelligence specifically focused on a proximate incident to identify undiscovered attacks. You will investigate and analyzesall relevant response activities. This role is crucial in enhancing the cybersecurity posture of DHS by proactively seeking out and neutralizing cyber threats before they can impact our systems. The Cyber Security Threat Hunter may respond to crisis or urgent situations to mitigate immediate and potential threats. Approaches may include the use information and threat intelligence specifically focused on a proximate incident to identify undiscovered attacks. The Cyber Security Threat Hunter will collaborate with other internal and external POCs and teams improving the security posture of the DHS enterprise.

**Responsibilities include, but are not limited to:**

+ Collaborate with incident response teams to investigate, analyze, and remediate identified threats

+ Identify and assess the capabilities and activities of cyber criminals or foreign intelligence entities; design and administer procedures in the organization that sustains the security of the organization’s data and access to its technology and communications systems

+ Identifies and assesses the capabilities and activities of cyber criminals or foreign intelligence entities; design and administer procedures in the organization that sustains the security of the organization’s data and access to its technology and communications systems.

+ Provide computer forensic support to high technology investigations in the form of evidence seizure, computer forensic analysis, and data recovery

+ Monitor and assess complex security devices for patterns and anomalies from raw events (DNS, DHCP, AD, SE logs), tag events for Tier 1 & 2 monitoring

+ Conduct malware analysis in out-of-band environment (static and dynamic), including complex malware; proactively search for and identify cyber threats, including advanced persistent threats (APTs), that could compromise DHS networks and systems; prepare detailed threat reports and briefings for technical and non-technical stakeholders.

+ Analyze network traffic, system logs, and other data sources to detect anomalies and indicators of compromise (IOCs); develop and implement threat hunting methodologies, techniques, and tools to improve detection capabilities

**Minimum Qualifications:**

+ Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.

+ 1+ years of relevant experience

+ 8570 compliant certifications; relevant certifications such as CISSP, GCIH, GCFA, GCIA, or similar are highly desirable.

**Preferred Qualifications:**

+ Previous Network Operations Center (NOC) or IT Operations experience and a strong understanding of network protocols, system logs, and security event correlation.

+ Familiarity with DHS policies and procedures. Knowledge of broader cybersecurity frameworks (e.g., NIST, ISO 27001).

+ Understanding of ITIL4 principles

+ Master’s Degree

+ Proficiency with threat hunting tools and platforms (e.g., Splunk, ELK Stack, CrowdStrike, Carbon Black) and experience in analyzing malware, attack vectors, and threat actor TTPs.

**Clearance Requirements:**

+ Must have a current/active Secret clearance with the ability to obtain and maintain a TS/SCI.

+ The ability to obtain and maintain a DHS EOD suitability is required prior to starting this position.

**Physical Requirements:**

+ Must be able to remain in a stationary position 50%

+ Constantly operates a computer and other office productivity machinery, such as a calculator, copy machine and computer printer

+ The person in this position needs to occasionally move about inside the office to access file cabinets, office machinery, etc.

ManTech International Corporation, as well as its subsidiaries proactively fulfills its role as an equal opportunity employer. We do not discriminate against any employee or applicant for employment. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

If you are a qualified individual with a disability and require a reasonable accommodation to apply for a position with ManTech through its online applicant system, please email us at [e-mail] and provide your name and contact information.