Tier-3 Cybersecurity Incident Response Lead (Multi-Cloud)

Cybersecurity Jobs; McLean (VA); On-site; USD 135,000 - 170,000; Full time

Job summary

MANTECH is seeking a Cybersecurity Operations Specialist in McLean, VA to serve as the primary technical expert and operations lead for incident response. The role blends deep investigations with security workflow engineering, management oversight, and contract compliance across enterprise and cloud environments.

You will act as the tier-3 escalation point for complex threats, drive investigations end-to-end, and push automation, exercises, threat hunting, and robust toolsets to improve

Qualifications

• Minimum High School Diploma required.
• 10+ years of cybersecurity experience.
• 5+ years in cyber defense operations, incident response, or CSOC environments.
• 3+ years managing or leading technical staff.
• Experience leading complex incident response investigations across multi-cloud and enterprise architectures.
• GIAC GCIH, GCFA, GNFA, CCSP, or CISSP certifications.
• PMI PMP or ITIL certifications.
• Active/current TS/SCI with Polygraph required.

Responsibilities

• Lead tier-3 escalation for complex, high-impact security threats and investigations.
• Architect automated playbooks and integrate threat intelligence to improve detection and analyst workflows.
• Design and execute exercises, threat hunting, and maintain tools/templates for failover and alternate-site operations.
• Manage shift personnel, performance evaluations, onboarding, and rosters for continuous coverage.
• Provision and audit RBAC, enforce documentation standards, and manage continuity and relocation protocols.
• Own operational KPIs and deliver executive reporting on threat trends and program health.

Skills

Incident response

Leadership

Automation

Threat hunting

Multi-cloud

SIEM/EDR

Team management

Education

High School Diploma

GIAC GCIH, GCFA, GNFA, CCSP, or CISSP

TS/SCI with Polygraph

PMP or ITIL certification

Tools

SIEM/EDR

RBAC

Job description

MANTECH is seeking a Cybersecurity Operations Specialist in McLean, VA to serve as the primary technical expert and operations lead for incident response. The role blends deep investigations with security workflow engineering, management oversight, and contract compliance across enterprise and cloud environments.

You will act as the tier-3 escalation point for complex threats, drive investigations end-to-end, and push automation, exercises, threat hunting, and robust toolsets to improve