Cybersecurity Analyst - Days

As a Cybersecurity Analyst at ManTech, you will monitor and protect Air Gapped Security Fabrics using managed SECOPs tools. This includes conducting event analysis through SIEM, creating response tickets in case management, and troubleshooting with TIER 2 Analysts. Engaging in developing security detections and ensuring compliance also forms a crucial part of your role.

To qualify for the Cybersecurity Analyst position at ManTech, candidates should hold a High School diploma along with at least 4 years of experience in Security Operations or Cyber Security. Familiarity with SIEM, IDS, EDR, and case management tools is essential, and an active 8140 Certification is preferred. Candidates with a degree in Information Technology or a related field will also stand out.

In the Cybersecurity Analyst role at ManTech, you will enhance the organization's security posture through timely detections and compliance responses. Your insights will drive the security team's decisions, helping craft security measures while actively participating in the development of security alerts and refining processes based on your findings.

Cybersecurity Analysts at ManTech typically work a Monday to Friday schedule from 7 AM to 3 PM. However, please note that schedules may adjust based on business needs, reflecting our commitment to flexibility in a mission-critical environment.

A Cybersecurity Analyst at ManTech will utilize various tools related to Security Information and Event Management (SIEM), Intrusion Detection Systems (IDS), Endpoint Detection and Response (EDR), and additional case management tooling. Experience with these tools is vital for success in monitoring and enhancing cybersecurity measures effectively.

When answering, focus on specific tools you've used such as SIEM, IDS, EDR, and your familiarity with scripting and automation. Provide examples of how you've applied these tools in real scenarios and the impact they had on security operations. Showing a deep understanding will demonstrate your value.

Outline a specific incident response scenario where you identify the threat, detail your approach effectively, and explain the outcome. Highlight your problem-solving and analytical skills and your ability to communicate with team members to showcase your teamwork capabilities.

Share the proactive monitoring techniques, including SIEM event correlation, alert tuning, and the use of IDS/IPS that you've implemented. Discuss how these methods help mitigate risks and maintain security, illustrating your analytical and technical skills in your response.

Discuss daily practices like following cybersecurity blogs, participating in professional forums, attending webinars or conferences, and utilizing threat intelligence platforms. This demonstrates your commitment to continuous learning and adaptability in the ever-evolving cybersecurity landscape.

Describe a clear, systematic approach, including initial detection, assessment, containment measures, and communication with relevant stakeholders. Make sure to highlight your ability to prioritize tasks under pressure, showcasing your organizational and timing skills.

Share your criteria for assessing the severity and potential impact of alerts, along with how you classify and escalate incidents. Convey your decision-making process that balances urgency with thoroughness to show your critical thinking.

Share specific examples illustrating your process for developing accuracy in threat reporting, emphasizing your ability to translate technical terminology into clear narratives. Highlight how these reports drive decision-making and improve security posture.

Discuss instances where you've had to explain technical concepts to non-technical clients or collaborate to address security concerns. This showcases your communication skills and ability to uphold a customer-first attitude, which is crucial at ManTech.

Clarify your insight into Security Technical Implementation Guides (STIG) and their application in hardening systems. Explain how you've implemented these policies to improve security, showcasing your attentiveness to detail and adherence to best practices.

Describe a professional and constructive approach to conflict resolution, including active listening, seeking to understand differing perspectives, and working collaboratively towards a consensus. This highlights your interpersonal skills and ability to maintain harmony within a security team.