Cyber Threat Lead

MANTECH seeks a motivated, career, and team-oriented Cyber Threat Lead to support a DHS customer in Chandler, AZ OR the National Capital Region .

As part of this mission, you will help the organization maintain its prestigious designation as a Cybersecurity Service Provider (CSP) and Center of Excellence (COE). Our team provides comprehensive, 24/7/365 security services supporting an expansive network across LANs, WANs, and advanced Cloud-based infrastructures. This is a unique opportunity to utilize a “kill chain” process to thwart Advanced Persistent Threats (APT) and support cutting-edge technologies like Zero Trust Architecture, AI/ML risk mitigation, and Post-Quantum Computing readiness.

Responsibilities include but not limited to:

• Execute a repeatable process to confirm if threat intelligence affects the ICE environment.
• Conduct predictive threat simulations to determine attack probability and cost analysis.
• Incorporate Data Science modeling and machine learning into daily hunt operations.
• Identify and investigate endpoint, network, and cloud-based threats.

• Bachelor’s Degree (or 4+ additional years of experience).
• 5+ years of experience with data hunting/manipulation.
• One of the following: CISSP (Associate), CCSP, SSCP, GCIH, GNFA, or GCIA AND one from the DOD 8570 CSSP list.

Preferred Qualifications:

• Skill in writing scripts (R, Python, SQL) for advanced data analysis.
• Advanced proficiency in using EDR and SOAR solutions for threat identification.
• Expertise in incorporating machine learning models into daily threat hunting.
• Proven ability to identify and investigate threats within Cloud-based environments.
• Experience conducting predictive simulations for attack cost and probability.
• Experience with post-quantum computing assessment/implementation

Clearance Requirements:

• Active Secret clearance and SCI eligibility.
• Must be able to obtain and maintain an ICE Entry on Duty (EOD) Suitability.

Physical Requirements:

• Must be able to remain in a stationary position 50% of the time.
• Occasionally move about inside the office to access file cabinets, office machinery, or to communicate with co-workers and customers.