Cyber Threat Cell Lead

4 days ago


Springfield, United States ManTech Full time

ManTech is seeking a motivated, career and customer-oriented Cyber Threat Analyst, Principal to join our team in the Springfield, VA area.

The Cyber Threat Cell Lead performs as the technical expert for the NRO Cybersecurity Operations Squadron (COS) Threat Cell team. The COS Threat Cell Lead provides direction, leadership and mentorship to the team that conducts research, analysis, and correlation across a wide variety of all source cyber threat data sets, and proactive threat hunts. The individual should have excellent customer service, communications, presentation, analytical and troubleshooting skills along with the ability to work under pressure. It is a key requirement of this position to be able to quickly and efficiently resolve security issues while maintaining high levels of operational metrics.

Responsibilities include, but are not limited to:

  • Lead, train, and equip team members to research, analyze, counter cyber threat activities
  • Lead and assign personnel on threat hunts
  • Conduct proactive threat hunts to uncover previously undetected adversary behavior, performing in-depth host and network log analysis, and delivering systematic threat assessments.
  • Review operational detection mechanisms to assess security posture, recommending new/custom signatures to counter prospective threats and enable future threat hunts.
  • Manage cyber intelligence requirements and focusing cyber intelligence collection efforts. Identifying emerging cyber technologies, capabilities, or weapons which pose a threat to US or Allied systems.
  • Collect and analyzing all-source threat intelligence to identify adversary capabilities and intent, driving resource allocation for enterprise cyber defense operations.
  • Produce comprehensive cybersecurity reports, providing sourced and summarized threat intelligence, outlining threat hunt findings and limitations, and presenting recommendations to system owners, cyber defenders, and policy makers.
  • Coordinate with the U.S. Intelligence Community and private sector to exchange threat intelligence, emerging trends, and effective countermeasures.
  • Research known adversarial Tactics, Techniques and Procedures (TTPs) to identify foundational components, isolate associated host or network events, and enable threat mitigation, detection, and response.
  • Create custom cybersecurity dashboards to monitor host and network activity, enabling rapid identification of successful and unsuccessful intrusion attempts.
  • Perform analysis, correlation, and attribution of incidents to Advanced Persistent Threat (APT) groups.
  • Ensure the integrity and protection of networks, systems, and applications by technical enforcement of organizational security policies.
  • Perform research and analysis of APT infrastructure and malicious binaries, external cyber threat intelligence reporting and production.
  • Collaborate across the U.S. IC and private sector regarding observed threats, intrusion attempts, and successful compromises to network infrastructure, applications, and operating systems.
  • Disseminate timely Indicators of Compromise (IOCs) and warnings of cyber threat activity against U.S. service members and Department of Defense (DoD)-owned and operated hosts and networks.

Basic Qualifications:

  • Bachelor’s degree or 4+ additional years of experience in lieu of degree
  • 7+ years of cyber experience
  • Experience with security technology or discipline such as Incidents and Warnings Management, Cybersecurity Operations, Cybersecurity Engineering.
  • IAT Level II (GSEC, Security+, SSCP, or CCNA-Security) certification required or abilty to obtain within 6 months of hire

Preferred Qualifications:

  • Ability to use MS Office, SIEM tools, Analytical and Critical Thinking Skills, Interpersonal and People Skills, Oral and Written Communication Skills, Organizational Skills, Project Management Ability, Public Speaking Skills.
  • Ability to effectively interact with various levels of senior management is necessary
  • Ability to make decisions and resolve problems effectively – Seek out information and data to evaluate, prioritize and formulate best solution or practice
  • Ability to multi-task, work independently and as part of a team, share workloads, and deal with sudden shifts in project priorities
  • CNDSP-A (GCIA, GCIH, or CEH) or CNDSP-IR (GCIH, CSIH, or CEH) certification

Security Clearance Requirements:

  • Active TS/SCI w/ Polygraph

Physical Requirements:

  • Must be able to remain in a stationary position 50%
  • Constantly operates a computer and other office productivity machinery, such as a calculator, copy machine and computer printer.
  • The person in this position frequently communicates with co-workers, management and customers, which may involve delivering presentations. Must be able to exchange accurate information in these situations
  • Occasionally ascends/descends a ladder to install and/or maintain network transport material.



  • Springfield, United States ManTech International Full time

    ManTech is seeking a motivated, career and customer-oriented Cyber Threat Analyst, Principal to join our team in the Springfield, VA area. The Cyber Threat Cell Lead performs as the technical expert for the NRO Cybersecurity Operations Squadron (COS) Threat Cell team. The COS Threat Cell Lead provides direction, leadership and mentorship to the team that...


  • Springfield, Virginia, United States Agile Defense, Inc. Full time

    Agile Defense, Inc. is a dynamic and innovative company that provides advanced cyber analytics services to government agencies and private sector organizations. We are seeking a highly skilled Cyber Threat Intelligence Lead to join our team.Job DescriptionThe Cyber Threat Intelligence Lead will be responsible for developing and implementing cyber threat...


  • Springfield, Virginia, United States GuidePoint Security Full time

    Key Responsibilities:Support the investigation of large and small-scale cyber breachesDevelop new capabilities to enhance the analysis capabilities of the teamLearn and keep up with current cyber threats, attack methodology, active campaigns, and detection techniques using a wide variety of capabilities and sourcesUnderstand and utilize cyber threat...


  • Springfield, United States Parsons Full time

    In a world of possibilities, pursue one with endless opportunities. Imagine Next! When it comes to what you want in your career, if you can imagine it, you can do it at Parsons. Imagine a career working with intelligent, diverse people sharing a common quest. Imagine a workplace where you can be yourself. Where you can thrive. Where you can find your next,...


  • Springfield, United States Parsons Full time

    In a world of possibilities, pursue one with endless opportunities. Imagine Next! When it comes to what you want in your career, if you can imagine it, you can do it at Parsons. Imagine a career working with intelligent, diverse people sharing a common quest. Imagine a workplace where you can be yourself. Where you can thrive. Where you can find your next,...


  • Springfield, Illinois, United States McIntire Solutions Full time

    Job DescriptionMaintain cutting-edge security defenses for McIntire Solutions by identifying and mitigating potential threats. As a Cyber Security Detections Engineer, you will analyze network traffic and system data to detect anomalies and predict potential risks.Analyze network traffic and system data to identify anomalous activity and potential threats to...


  • Springfield, United States Parsons Full time

    In a world of possibilities, pursue one with endless opportunities. Imagine Next! When it comes to what you want in your career, if you can imagine it, you can do it at Parsons. Imagine a career working with intelligent, diverse people sharing a common quest. Imagine a workplace where you can be yourself. Where you can thrive. Where you can find your next,...


  • Springfield, Illinois, United States McIntire Solutions Full time

    Job OverviewWe are seeking a highly skilled Cyber Security Detections Engineer to join our team at McIntire Solutions.This role is responsible for analyzing and identifying potential security threats, developing and implementing counter-measures, and collaborating with cross-functional teams to enhance overall cybersecurity posture.


  • Springfield, Illinois, United States Phoenix Home Care and Hospice Full time

    Job DescriptionAs a Cyber Security Analyst at Phoenix Home Care and Hospice, you will play a critical role in safeguarding our organization's sensitive data and systems. Your primary responsibilities will include threat analysis, incident response, vulnerability assessment, and security policy development.Required Skills and QualificationsTechnical...


  • Springfield, United States GuidePoint Security Full time

    GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation's top organizations, such as Fortune 500 companies and U.S. government agencies,...


  • Springfield, Virginia, United States System One Full time

    Job SummaryThis role is responsible for providing advanced cybersecurity services, including threat intelligence, incident response, and network defense. The Cyber Security Operations Specialist will work closely with internal stakeholders to identify and mitigate potential security threats.


  • Springfield, United States ALTA IT Services Full time

    About the RoleCyber Security Operations Specialist with expertise in threat intelligence services for collection, fusion and dissemination to support National Geospatial-Intelligence Agency (NGA) missions.Key ResponsibilitiesProvide cyber threat intelligence services for NGASupporting operations with expertise in threat intelligence, cyber security and...


  • Springfield, Virginia, United States ManTech Full time

    ManTech is seeking a highly skilled and experienced Senior Cyber Security Analyst to join our team and help protect our clients' systems and networks from cyber threats.In this role, you will be responsible for providing leadership and support to our CSOC Security Team, managing cyber and network sensor activity, and performing security event and incident...


  • Springfield, Illinois, United States Leidos Full time

    About the RoleWe are seeking a highly skilled Cyber Security Expert to join our team in supporting the Department of Homeland Security (DHS) Cyber Assessments Program. As a key member of our team, you will be responsible for conducting penetration testing and vulnerability assessments to ensure the security of critical infrastructure and systems.Key...


  • Springfield, Massachusetts, United States JobRialto Full time

    JobRialto is seeking a highly skilled Cyber Security Expert to join our Enterprise Cybersecurity organization, focusing on Capital Markets. As a key member of our team, you will play a critical role in protecting our clients' assets and sensitive information from evolving cyber threats.The ideal candidate will have extensive experience in threat detection,...


  • Springfield, Illinois, United States Phoenix Home Care & Hospice Full time

    Job Overview:Cyber Security Analysts are responsible for protecting computer systems and networks from cyber threats. This involves actively monitoring for security breaches, identifying potential threats, investigating incidents, initiating corrective measures, and implementing security strategies to safeguard sensitive data and systems.The ideal candidate...


  • Springfield, United States Agile Defense, Inc. Full time

    Requisition #752 Job Title: Cyber Intelligence Analyst III | Exempt Location: 6595 Springfield Center DriveSpringfield, Virginia22150 Clearance Level: Active DoD - Top Secret SCI Required Certification(s): • One cyber certification relating to cybersecurity threat intelligence, blue team/defense, red team, cyber insider threat, digital/network forensics,...


  • Springfield, United States Parsons Corporation Full time

    Basic Qualifications:Active TS/SCIAbility to obtain and maintain a CI POLY.Bachelor’s Degree or equivalent experience in a related field.Active Top-Secret security clearance.Must be able to obtain and maintain a CI PolygraphCyber analysis or Intelligence experience; including working with data analytics tools and databases (e.g. Forcepoint, Analyst...


  • Springfield, United States Parsons Corporation Full time

    Basic Qualifications:Active TS/SCIAbility to obtain and maintain a CI POLY.Bachelor’s Degree or equivalent experience in a related field.Active Top-Secret security clearance.Must be able to obtain and maintain a CI PolygraphCyber analysis or Intelligence experience; including working with data analytics tools and databases (e.g. Forcepoint, Analyst...


  • Springfield, United States Parsons Corporation Full time

    Basic Qualifications:Active TS/SCIAbility to obtain and maintain a CI POLY.Bachelor’s Degree or equivalent experience in a related field.Active Top-Secret security clearance.Must be able to obtain and maintain a CI PolygraphCyber analysis or Intelligence experience; including working with data analytics tools and databases (e.g. Forcepoint, Analyst...