Senior Principal Cyber Engineer

MANTECH; Chantilly (VA); On-site; USD 140,000 - 190,000; Full time

Job summary

MANTECH seeks a Senior Principal Cyber Engineer in Chantilly, VA to design, secure, and sustain complex enterprise network environments supporting critical missions.

You will collaborate across technical teams and stakeholders to deliver resilient, highly available network solutions, driving operational excellence and innovation.

Qualifications

• Bachelor’s degree or 4+ additional IT/technical years in lieu of degree.
• 10+ years of cybersecurity experience focusing on SIEM engineering, log observability, or log forwarding.
• Proficiency with REGEX for data filtering/extraction.
• Experience operating data pipelines with Cribl Stream or Cribl Edge in production.
• Knowledge of log forwarding, indexing, data collection, search architecture, and parsing.

Responsibilities

• Gather, coordinate, and deliver technical information with engineers and customers.
• Troubleshoot and build complex, highly available network topologies.
• Develop and manage data pipelines to enhance user experience.
• Lead network troubleshooting and root cause analysis across enterprise, data center, cloud, and hybrid environments.
• Perform engineering support and system administration tasks (installation, configuration, maintenance, patching, backup/restore).
• Provide Tier 2/3 maintenance and engineering support for cybersecurity technologies.
• Support Assessment and Authorization activities related to cybersecurity technologies.

Skills

REGEX proficiency

SIEM engineering

Log observability

Cribl Stream

Cribl Edge

Data pipelines

Network security

Education

Bachelor's degree

Tools

Cribl Stream

Cribl Edge

Job description

MANTECH seeks a motivated, mission-focused Senior Principal Cyber Engineer to join our team in Chantilly, VA.

In this role, you will provide advanced engineering expertise to design, implement, secure, and sustain complex enterprise network environments supporting critical customer missions. You will collaborate across technical teams and customer stakeholders to deliver resilient, highly available, and secure network solutions while driving operational excellence and innovation.

Responsibilities Include But Are Not Limited To

• Interact with engineers, cross-functional teams, and customers at multiple levels to gather, coordinate, and deliver technical information.
• Work closely with engineering teams to troubleshoot and build complex, highly available network topologies.
• Develop and manage data flow pipelines implementing complex extraction, transformation, and filtering to enhance user experience.
• Lead complex network troubleshooting and root cause analysis across enterprise, data center, cloud, and hybrid environments, utilizing packet captures, routing analysis, traffic flow inspection, and protocol level diagnostics to rapidly identify and resolve service-impacting issues.
• Perform engineering support and system administration for applications and systems, including installation, configuration, maintenance, patching, and backup/restore activities.
• Provide Tier 2/3 maintenance and engineering support for cybersecurity technologies.
• Support Assessment and Authorization (A&A) activities related to cybersecurity technologies, where applicable.

Minimum Qualifications

• Bachelor’s degree or 4+ additional years of IT experience in lieu of degree.
• 10+ years of experience in cybersecurity with a focus on SIEM Engineering, log observability, and/or log forwarding.
• Proficiency in utilizing REGEX to filter or extract data.
• Experience operating and managing data pipelines with Cribl Stream or Cribl Edge in a production environment.
• Knowledge of log forwarding, indexing, data collection, search architecture, source types, and ingestion-time parsing.
• Must have or be willing to obtain an IAT Level II (or higher) certification within 30 days of hire.
• Must have or be willing to obtain Cribl Engineer Certification (CC Engineer) within 30 days of hire.

Preferred Qualifications

• Knowledge of Cribl architecture and Cribl best practices with experience implementing in enterprise environments.
• Understanding of architectural principles such as defense in depth, resilience, and integrated security operations.
• Familiarity with federal cybersecurity guidance, including NIST SP 800-37 (Risk Management Framework) and NIST SP 800-137 (Information Security Continuous Monitoring).
• In-depth understanding and practical experience with Cribl, REGEX, and log forwarding.
• Experience working in Agile environments.

Clearance Requirements

• Must possess an active TS/SCI with Polygraph.

Physical Requirements

• Must be able to remain in a stationary position 50% of the time.
• Must occasionally move about inside the office to access file cabinets, office machinery, or communicate with co-workers, management, and customers via email, phone, or virtual platforms, which may involve delivering presentations.