CSIRT Analyst - REMT - Remote Worker Location

Secure our Nation, Ignite your Future

Become an integral part of a diverse team that leads the world in Mission, Cyber, and Intelligence Solutions. At ManTech International Corporation, you will help protect our national security while working on innovative projects that offer opportunities for advancement.

Currently, ManTech is seeking a motivated, career and customer-oriented CSIRT Analyst to join our team. This is a remote position.

As a CSIRT Analyst your duties include analyzing relevant cyber security event data and other data sources for attack indicators and potential security breaches; produce reports, assist in coordination during incidents; and coordinate with the engineering team to ensure all security monitoring systems are on-line, up to date, and fully operational. 

Responsibilities include but are not limited to:

• Monitoring intrusion detection and prevention systems and other security event data sources daily.  

• Determining if security events monitored should be escalated to incidents and follow all applicable incident response and reporting processes and procedures.

• Solving problems, asking questions, and discovering why things are happening.

• Correlating data from Endpoint Detection and Response (EDR) systems with data from other sources such as firewall, web server, and Syslogs.

• Tuning and filtering of events and information, creating custom views and content with the assistance of the DevOps team.

• Conducting hunting, monitoring, analyzing, and responding to threats, contribute to Computer Network Defense, and create solutions to augment Defensive Cyber Operations.

• Providing support for Government CSIRT leadership deliverables and appropriately documenting each incident in the existing ticketing system.

• Coordinating with the engineering team to ensure production CSIRT systems are operational and maintained.

• Reviewing data with the Cyber Vulnerability Assessment Team, Firewall Administrators, Network Engineering, System Administrators, and other appropriate groups to determine the …