Senior Principal Cyber Security Engineer

ManTech; Chantilly (VA); On-site; USD 150,000 - 210,000; Full time

Job summary

ManTech is seeking a Senior Principal Cyber Security Engineer in Chantilly, VA, to design, deploy, and maintain secure data collection and monitoring solutions for enterprise decision support.

You will support mission-critical cybersecurity operations, troubleshoot ingestion issues, and deploy Splunk add-ons while ensuring robust access control and accreditation compliance. 10+ years of cybersecurity experience and DoD/8570.1 IAT II+ certification are preferred.

Qualifications

• Bachelor’s degree, or 4+ years of cyber experience in lieu of a degree.
• 10+ years of experience in a cybersecurity role.
• Experience with SIEM platforms and/or Splunk.
• Knowledge of Linux systems administration, TCP/IP networking, and general security practices.
• Knowledge of Certification and Accreditation (C&A) processes.
• Knowledge of DoD policy and security guidance for information systems.
• DoD Directive 8570.1 IAT Level II or higher certification, or the ability to obtain within six months.

Responsibilities

• Troubleshoot data collection issues to ensure accurate ingestion of security data.
• Diagnose and resolve system issues impacting stability, performance, or usability.
• Deploy, manage, and maintain Splunk Add-ons for specific data sources.
• Develop and maintain engineering and accreditation documentation.
• Deliver a comprehensive Splunk deployment document for production environments.
• Implement and maintain strict role-based access control.
• Design and deploy Splunk forwarders using the Deployment Server.

Skills

SIEM/Splunk

Linux administration

Networking (TCP/IP)

DoD policy & security guidance

C&A processes

IAT Level II+ certification

Education

Bachelor’s degree or 4+ years cyber experience

Tools

Splunk

Linux distributions (Red Hat, CentOS)

AWS / Cloud environments

Job description

MANTECH seeks a motivated, career and customer-oriented Senior Principal Cyber Security Engineer to join our team in Chantilly, VA .

In this role, you will support mission-critical cybersecurity operations by designing, deploying, and maintaining secure, resilient data collection and monitoring solutions that enable informed decision-making across the enterprise.

Responsibilities include but are not limited to:

• Troubleshoot new and existing data collection issues to ensure accurate and reliable ingestion of security-relevant data.

• Diagnose and resolve system issues that impact stability, performance, or usability.

• Deploy, manage, and maintain supported and unsupported Splunk Add-ons required for specific data sources.

• Develop and maintain documentation, including Body of Evidence (BOE) artifacts, engineering documentation, change management records, system security plans, and accreditation materials, as required.

• Deliver a comprehensive Splunk deployment document detailing specifications, deployment methods, and architectural considerations for production environments.

• Implement and maintain strict role-based access control to ensure data is accessible on a validated need-to-know basis.

• Design and deploy Splunk forwarders using centralized configuration management through the Splunk Deployment Server to support rapid and consistent deployments.

Minimum Qualifications:

• Bachelor’s degree, or 4+ additional years of cyber experience in lieu of a degree.

• 10+ years of experience in a cybersecurity role.

• Experience with Security Information and Event Management (SIEM) platforms and/or Splunk.

• Knowledge of Linux systems administration, general operating system security practices, TCP/IP networking, and network security concepts.

• Knowledge of Certification and Accreditation (C&A) processes.

• Knowledge of DoD policy and technical security guidance for information systems.

• DoD Directive 8570.1 IAT Level II or higher certification, or the ability to obtain within six (6) months.

Preferred Qualifications:

• Experience with Linux distributions, including Red Hat and CentOS.

• Experience with AWS or other cloud environments.

• Knowledge of ICS 500-27 audit collection requirements.

• Familiarity with Enterprise Security Services, Host Based Security Services, Enterprise Vulnerability Scanning Services, and User Activity Monitoring (UAM).

• Ability to modify feed creation to ingest customer logs in standardized formats to meet policy and compliance requirements.

• Splunk certification

Clearance Requirements:

• An active TS/SCI with Polygraph is required.

Physical Requirements:

• Must be able to remain in a stationary position 50% of the time.

• Occasionally moves about inside the office to access file cabinets, office machinery, or to communicate with co-workers, management, and customers via email, phone, or virtual communication, which may involve delivering presentations.

MANTECH International Corporation considers all qualified applicants for employment without regard to disability or veteran status or any other status protected under any federal, state, or local law or regulation.

If you need a reasonable accommodation to apply for a position with MANTECH, please email us at [e-mail] and provide your name and contact information.