Cybersecurity Analyst - Evenings

As a Cybersecurity Analyst - Evenings at ManTech, your key responsibilities include monitoring operations of IT infrastructures for critical SECOPs functions, performing event analysis with SIEM tools, and creating response tickets in case management. You'll also engage in troubleshooting, coordinating with TIER 2 Analysts, and following security playbooks to enhance our defensive strategies.

To apply for the Cybersecurity Analyst - Evenings position at ManTech, you need a minimum of a High School Diploma/GED and 4+ years of relevant experience in Security Operations, Cybersecurity, or Systems Administration. Proficiency with SIEM, IDS, and EDR tools is also essential, along with an active 8140 Certification preferred.

The work schedule for the Cybersecurity Analyst - Evenings role at ManTech is from Wednesday to Sunday, 2 PM to 12 AM. However, schedules may change based on business needs, so flexibility is important for this position.

A successful Cybersecurity Analyst - Evenings at ManTech should possess strong analytical skills, proficiency in SIEM, IDS, and EDR tools, as well as the ability to troubleshoot security incidents effectively. Knowledge of local and wide area networks, scripting, and automation will also enhance your performance in this critical role.

Having an active TS/SCI with Polygraph clearance is essential for the Cybersecurity Analyst - Evenings position at ManTech as it ensures you can access sensitive information and participate in our strategic security operations. This level of clearance reflects the trust and responsibility associated with maintaining national security.

In answering this question, highlight specific SIEM tools you've used, discuss your familiarity with collecting and analyzing logs, and provide examples of instances where your work led to actionable insights or improved security measures.

Discuss your approach to risk assessment; explain how you categorize incidents based on severity and impact. Provide examples of past experiences where prioritization led to effective incident response.

Outline your systematic approach to troubleshooting, from accurately identifying the alert source and context to engaging TIER 2 or TIER 3 team members as necessary. Share a real-life example to illustrate your method.

Explain your techniques for filtering out false positives, which might include collaboration with TIER 2 and TIER 3 teams, and give examples of how you have tuned alerts in previous roles to improve response efficiency.

Your answer should showcase your process: gathering intelligence, translating indicators of compromise (IOCs) into narratives, and how you deliver recommendations for mitigating identified threats.

Discuss the importance of STIG (Security Technical Implementation Guides) in establishing secure baselines and detail your knowledge of hardening practices within operating systems and network devices.

Detail your commitment to continuous learning through professional training, participating in cybersecurity forums, following authoritative publications, and attending webinars or conferences related to cybersecurity.

Relate a specific incident where your skills were tested. Describe the challenge, your assessment steps, the actions you took, and the outcome. Emphasize your analysis and decision-making process.

Discuss the importance of communication and teamwork in high-pressure situations. Provide strategies for conflict resolution, emphasizing collaboration and focus on the common goal of protecting the organization.

Mention specific scripting languages you are proficient in, such as Python or Bash, and provide examples of tasks you’ve automated, explaining how they improved efficiency in your role.