Principal Cyber Threat Analyst

ManTech; Denver (CO); On-site; USD 110,000 - 140,000; Full time

Job summary

MANTECH seeks a motivated, career- and customer-oriented Principal Cyber Threat Analyst to join our team in Denver, CO. The role emphasizes proactive threat hunting, threat intelligence, and delivering comprehensive cybersecurity reports to system owners and policymakers.

Responsibilities include log analysis for IOCs, researching TTPs of adversaries, and creating dashboards to monitor host and network activity. Requires TS/SCI w/ Poly and 5+ years of cybersecurity experience.

Qualifications

• Bachelor’s degree or 4+ years of cyber experience in lieu of a degree.
• 5+ years of cybersecurity experience.
• IAT Level II certification (GSEC, Security+, SSCP, or CCNA-Security).
• Experience with Incidents and Warnings Management, Cybersecurity Operations, or Cybersecurity Engineering.
• Demonstrated experience conducting proactive threat hunts across host, network, endpoint, and security telemetry.
• Experience analyzing system, network, endpoint, and security logs to identify anomalous activity and IOCs.
• Experience conducting cyber threat intelligence analysis, including assessing adversary capabilities, intent, infrastructure, and potential impact.

Responsibilities

• Conduct proactive threat hunts and deliver threat assessments.
• Manage cyber intelligence requirements and focus collection efforts.
• Produce comprehensive cybersecurity reports with sourced threat intelligence.
• Research adversarial TTPs to inform detection and mitigation.
• Create dashboards to monitor host and network activity.
• Perform incident attribution to APT groups.
• Research APT infrastructure and malware and report findings.

Skills

Threat hunting

Log analysis

Threat intelligence analysis

Incident attribution

Detection logic

Education

Bachelor's degree or 4+ years cyber experience in lieu of degree

Tools

Splunk

Microsoft Sentinel

Elastic

Job description

MANTECH seeks a motivated, career and customer-oriented Principal Cyber Threat Analyst to join our team in Denver, CO .

Responsibilities include but are not limited to:

• Conducting proactive threat hunts to uncover previously undetected adversary behavior, performing in-depth host and network log analysis, and delivering systematic threat assessments

• Managing cyber intelligence requirements and focusing cyber intelligence collection efforts; identifying emerging cyber technologies, capabilities, or weapons which pose a threat to US or Allied systems

• Producing comprehensive cybersecurity reports, providing sourced and summarized threat intelligence, outlining threat hunt findings and limitations, and presenting recommendations to system owners, cyber defenders, and policy makers

• Researching known adversarial Tactics, Techniques, and Procedures (TTPs) to identify foundational components, isolate associated host or network events, and enable threat mitigation, detection, and response

• Creating custom cybersecurity dashboards to monitor host and network activity, enabling rapid identification of successful and unsuccessful intrusion attempts

• Performing analysis, correlation, and attribution of incidents to Advanced Persistent Threat (APT) groups

• Conducting research and analysis of APT infrastructure and malicious binaries, external cyber threat intelligence reporting, and production

Minimum Qualifications:

• Bachelor’s degree or 4+ additional years of cyber experience in lieu of a degree

• 5+ years of cybersecurity experience

• IAT Level II certification (GSEC, Security+, SSCP, or CCNA-Security)

• Experience with related security technology or disciplines such as Incidents and Warnings Management, Cybersecurity Operations, or Cybersecurity Engineering

• Demonstrated experience conducting proactive threat hunts across host, network, endpoint, and security telemetry.

• Experience analyzing system, network, endpoint, and security logs to identify anomalous activity, Indicators of Compromise (IOCs), and adversary behavior.

• Experience conducting cyber threat intelligence analysis, including assessing adversary capabilities, intent, infrastructure, and potential impact.

Preferred Qualifications:

• Familiarity with SIEM and security analytics platforms such as Splunk, Microsoft Sentinel, Elastic, or similar technologies.

• Experience using threat intelligence frameworks, standards, and methodologies such as MITRE ATT&CK, Cyber Kill Chain or related frameworks.

• Experience creating custom detection signatures, analytic rules, correlation logic, or threat-hunting queries.

• Experience developing custom cybersecurity dashboards and visualizations to monitor host, network, and security activity.

Clearance Requirements:

• Must have an active TS/SCI w/Polygraph

Physical Requirements:

• The person in this position must be able to remain in a stationary position 50% of the time. Occasionally move about inside the office to access file cabinets, office machinery, or to communicate with co-workers, management, and customers, via email, phone, and or virtual communication, which may involve delivering presentations.

MANTECH International Corporation considers all qualified applicants for employment without regard to disability or veteran status or any other status protected under any federal, state, or local law or regulation.

If you need a reasonable accommodation to apply for a position with MANTECH, please email us at [e-mail] and provide your name and contact information.