Senior Cybersecurity Threat Hunter

ManTech; Mississippi; On-site; USD 90,000 - 150,000; Full time

Job summary

An established industry player is seeking a Senior Cybersecurity Threat Hunter to join their innovative team. This role involves collaborating with incident response teams to investigate and remediate cybersecurity threats, ensuring the safety of the organization’s data and technology. The ideal candidate will have extensive experience in threat hunting, incident response, and a deep understanding of cybersecurity protocols. With a focus on advanced threat detection and analysis, this position offers the opportunity to work in a dynamic environment that values expertise and proactive strategies. If you are passionate about cybersecurity and eager to make a significant impact, this role is perfect for you.

Qualifications

• 12+ years of experience in cybersecurity focusing on threat hunting and incident response.
• 8570 compliant certification such as CISSP or GCIH is required.

Responsibilities

• Collaborate with incident response teams to investigate identified threats.
• Analyze network traffic and system logs to detect anomalies.

Skills

Cybersecurity

Threat Hunting

Incident Response

Computer Forensics

Malware Analysis

Network Protocols

Security Event Correlation

Education

Bachelor’s degree in Computer Science

Master’s degree

Tools

Splunk

ELK Stack

CrowdStrike

Carbon Black

Job description

ManTech seeks a motivated, career and customer-oriented Senior Cybersecurity Threat Hunter to join our team in Stennis, MS.

Responsibilities include, but are not limited to:

1. Collaborate with incident response teams to investigate, analyze, and remediate identified threats.
2. Identify and assess the capabilities and activities of cyber criminals or foreign intelligence entities; design and administer procedures in the organization that sustains the security of the organization’s data and access to its technology and communications systems.
3. Identify, deter, monitor, and investigate computer and network intrusions.
4. Provide computer forensic support to high technology investigations in the form of evidence seizure, computer forensic analysis, and data recovery.
5. Monitor and assess complex security devices for patterns and anomalies from raw events (DNS, DHCP, AD, SE logs), tag events for Tier 1 & 2 monitoring.
6. Analyze network traffic, system logs, and other data sources to detect anomalies and indicators of compromise (IOCs).
7. Conduct detailed analysis of malicious code, attack vectors, and threat actor tactics, techniques, and procedures (TTPs).

Minimum Qualifications:

1. 12+ years of experience in cybersecurity with a focus on threat hunting, threat analysis, or incident response and a Bachelor’s degree in computer science, information technology, cybersecurity, or a related field of study.
2. An 8570 compliant certification, such as Certified Information Systems Security Professional (CISSP), GIAC Certified Incident Handler (GCIH), GIAC Certified Forensics Analyst (GCFA), GIAC Certified Intrusion Analyst (GCIA), or relevant certifications.
3. Proficiency with threat hunting tools and platforms (e.g., Splunk, ELK Stack, CrowdStrike, Carbon Black).
4. Strong understanding of network protocols, system logs, and security event correlation.
5. Experience in analyzing malware, attack vectors, and threat actor TTPs.

Preferred Qualifications:

1. A master's degree.
2. Experience working in a government or defense environment.
3. Familiarity with DHS policies and procedures.
4. Knowledge of broader cybersecurity frameworks (e.g., NIST, ISO 27001).

Clearance Requirements:

1. Must have a current/active Secret clearance with the ability to obtain and maintain a TS/SCI.
2. The ability to obtain and maintain a DHS EOD suitability is required prior to starting this position.

Physical Requirements:

1. Must be able to be in a stationary position more than 50% of the time.
2. Must be able to communicate, converse, and exchange information with peers and senior personnel.
3. Constantly operates a computer and other office productivity machinery, such as a computer.
4. The person in this position frequently communicates with co-workers, management, and customers, which may involve delivering presentations. Must be able to exchange accurate information in these situations.
5. The person in this position needs to occasionally move about inside the office to access file cabinets, office machinery, etc.

ManTech International Corporation, as well as its subsidiaries proactively fulfills its role as an equal opportunity employer. We do not discriminate against any employee or applicant for employment. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

If you are a qualified individual with a disability and require a reasonable accommodation to apply for a position with ManTech through its online applicant system, please email us at [e-mail] and provide your name and contact information.