CybersecurityJobs.io
← Back to all jobs
MANTECH

Cybersecurity Operations Specialist

MANTECH
McLean, VA Full time Posted 2h ago
Ai Security Cybersecurity Operations Cybersecurity Operations Lead Cybersecurity Tools Data Security Endpoint Security Facilities Management Identity and Access Management Incident Management Incident Response Information Security InfoSec Investigative Skills Management Project Management Risk Management Security Security Automation Security Incident Response Security Standards Security Testing Solution Architecture
Apply Now

Job Description

MANTECH is hiring a Cybersecurity Operations Specialist in McLean, VA to support cybersecurity incident response as a primary technical expert and operations lead. This onsite role blends deep incident investigation with security workflow engineering, along with management oversight, operational reporting, and contract compliance across enterprise and cloud environments.

Role Focus

You will serve as the tier-3 escalation point for complex, high-impact, multi-vector threats, driving investigations end-to-end and shaping how analysts and tooling respond to emerging risk. The position also emphasizes automation and operational readiness, including exercises, threat hunting, and maintaining technical toolsets and failover procedures for alternate-site operations.

Responsibilities

  • Lead end-to-end incident investigations across cloud and enterprise architectures as the tier-3 escalation lead for complex, high-impact, multi-vector security threats.
  • Architect automated playbooks, integrate threat intelligence, and leverage AI capabilities within SIEM/EDR tools to improve detection and streamline analyst workflows.
  • Design and execute exercises, perform threat hunting, and maintain technical toolsets and failover procedures for alternate-site operations.
  • Manage shift personnel, conduct performance evaluations and 1-on-1 coaching, oversee onboarding, and maintain rosters to ensure continuous operational coverage.
  • Provision and audit role-based access control (RBAC), enforce documentation standards, and manage emergency continuity and relocation protocols.
  • Own operational KPIs, deliver executive reporting on threat trends and program health, and align workflows with contract and government leadership.

Requirements

  • High School Diploma
  • 10+ years of cybersecurity experience
  • 5+ years in cyber defense operations, incident response, or CSOC environments
  • 3+ years managing or leading technical staff, including oversight of schedules and administrative deliverables
  • Experience leading complex incident response investigations across multi-cloud and enterprise architectures
  • 5+ years supporting large, classified cybersecurity contracts within the IC
  • GIAC GCIH, GCFA, GNFA, CCSP, or CISSP certification(s)
  • Project Management Professional (PMP) or ITIL certification(s)
  • Active/current TS/SCI with Polygraph is required
  • Must be able to remain in a stationary position 50% of the time

Technologies

  • SIEM/EDR
  • RBAC
  • AI

Similar Jobs