Lead Detection Engineer – SIEM, SOAR & Threat Hunting

ManTech; McLean (VA); On-site; USD 130,000 - 190,000; Full time

Job summary

MANTECH seeks a motivated and customer-oriented Cyber Detection Engineering Lead to join our team in McLean, VA. You will lead the mission to enhance cybersecurity detection and response by developing high-fidelity detection logic, automating security workflows, and strengthening threat-hunting operations.

This role acts as a technical leader and liaison with customer staff, overseeing project and task workflow to ensure successful mission execution, with a TS/SCI clearance preferred.

Qualifications

• High School Diploma and 7+ years of cybersecurity experience.
• Experience with Python for automation and data analysis.
• Hands-on experience with SIEM platforms such as Splunk, ELK, Sentinel, Chronicle, or similar technologies.
• Experience applying the MITRE ATT&CK framework for adversary tactics and techniques mapping.
• Experience with signature-based detection tools like YARA, Snort, Suricata.
• Experience with Windows internals and forensic artifacts for endpoint security investigations.

Responsibilities

• Develop, optimize, and deploy custom detection rules across SIEM platforms.
• Build, test, and tune security analytics pipelines to reduce false positives and improve alert fidelity.
• Design and implement SOAR playbooks to streamline security operations.
• Automate threat intelligence ingestion, correlation, and alerting mechanisms.
• Develop integration scripts between security tools and data sources to enhance visibility and response.

Skills

Python

Threat hunting

MITRE ATT&CK

EDR

Threat intelligence

Windows forensics

Splunk

ELK

Microsoft Sentinel

Chronicle

YARA

Snort

Suricata

Windows internals

Education

Bachelor's degree in Cybersecurity or Computer Science

Tools

Splunk

ELK

Microsoft Sentinel

Chronicle

YARA

Snort

Suricata

EDR tools

Windows forensics tools

Job description

MANTECH seeks a motivated and customer-oriented Cyber Detection Engineering Lead to join our team in McLean, VA. You will lead the mission to enhance cybersecurity detection and response by developing high-fidelity detection logic, automating security workflows, and strengthening threat-hunting operations.

This role acts as a technical leader and liaison with customer staff, overseeing project and task workflow to ensure successful mission execution, with a TS/SCI clearance preferred.