Cybersecurity Operations Specialist
Listed on 2026-10-19
-
IT/Tech
Cybersecurity, Security Management & Operations
MANTECH is hiring a Cybersecurity Operations Specialist in McLean, VA to support cybersecurity incident response as a primary technical expert and operations lead. This onsite role blends deep incident investigation with security workflow engineering, along with management oversight, operational reporting, and contract compliance across enterprise and cloud environments.
Role FocusYou will serve as the tier-3 escalation point for complex, high-impact, multi-vector threats, driving investigations end-to-end and shaping how analysts and tooling respond to emerging risk. The position also emphasizes automation and operational readiness, including exercises, threat hunting, and maintaining technical toolsets and failover procedures for alternate-site operations.
Responsibilities- Lead end-to-end incident investigations across cloud and enterprise architectures as the tier-3 escalation lead for complex, high-impact, multi-vector security threats.
- Architect automated playbooks, integrate threat intelligence, and leverage AI capabilities within SIEM/EDR tools to improve detection and streamline analyst workflows.
- Design and execute exercises, perform threat hunting, and maintain technical toolsets and failover procedures for alternate-site operations.
- Manage shift personnel, conduct performance evaluations and 1-on-1 coaching, oversee onboarding, and maintain rosters to ensure continuous operational coverage.
- Provision and audit role-based access control (RBAC), enforce documentation standards, and manage emergency continuity and relocation protocols.
- Own operational KPIs, deliver executive reporting on threat trends and program health, and align workflows with contract and government leadership.
- High School Diploma
- 10+ years of cybersecurity experience
- 5+ years in cyber defense operations, incident response, or CSOC environments
- 3+ years managing or leading technical staff, including oversight of schedules and administrative deliverables
- Experience leading complex incident response investigations across multi-cloud and enterprise architectures
- GIAC GCIH, GCFA, GNFA, CCSP, or CISSP certification(s)
- Project Management Professional (PMP) or ITIL certification(s)
- Active/current TS/SCI with Polygraph is required
- Must be able to remain in a stationary position 50% of the time
- SIEM/EDR
- RBAC
- AI
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).