ManTech seeks a motivated, career and customer-oriented Cyber Engineer to join our team in Herndon, VA . As a Cyber Engineer on our team, you will possess a strong background in development, data engineering, and automation, with a keen understanding of endpoint detection and response (EDR), digital forensics, security orchestration, automation and response (SOAR), and security information and event management (SIEM) tools like Splunk or Elk. This role is critical in enhancing our cyber defense capabilities through innovative solutions and automation.

Responsibilities include, but are not limited to:

1. Develop and maintain scripts and automation tools using Python or similar programming languages
2. Create and optimize Jupyter Notebooks for data analysis and reporting
3. Design, build, and maintain data pipelines and ETL processes using tools such as Apache NiFi and Diode, integrating data from various sources to support security operations and analytics
4. Implement and manage automation workflows using SOAR platforms and develop automated incident response playbooks to streamline CSOC processes
5. Deploy, configure, and manage EDR solutions to detect and respond to security threats and conduct thorough investigations and analysis of EDR alerts
6. Collect, preserve, and analyze digital evidence in accordance with legal and organizational requirements and perform digital forensic investigations to identify and analyze security incidents
7. Configure and maintain SIEM tools like Splunk or Elk for real-time monitoring and threat detection and develop and refine correlation rules, dashboards, and reports to enhance threat visibility

Minimum Qualifications:

1. Bachelor’s degree and 6+ years of experience in cybersecurity, systems engineering, computer science or similar technical field or High School Diploma and 10+ years of experience in cybersecurity, systems engineering, computer science or similar technical field
2. Experience developing scripts in Python or similar programming languages
3. Experience with data engineering tools and techniques, including ETL processes and Apache NiFi
4. Experience with automation and SOAR platforms
5. In-depth knowledge of EDR solutions and digital forensics methodologies
6. Proficient in using SIEM tools like Splunk or Elk

Preferred Qualifications:

1. Relevant cybersecurity certifications such as CISSP, GIAC, CEH or similar

Clearance Requirements:

Must have a current/active TS/SCI w/Polygraph

Physical Requirements:

The person in this position must be able to remain in a stationary position 50% of the time.