Cyber Security Detections Engineer

5 days ago


Denver, Colorado, United States ManTech Full time
Job Summary

ManTech is seeking a motivated Cyber Security Detections Engineer to join our team in the Denver, CO area. The ideal candidate will have a strong background in cybersecurity and experience with modern Windows, UNIX, Linux, network operating systems, databases, and virtual computing.

Responsibilities

Support Cyber Operations Squadron (COS) activities to publish up-to-date cybersecurity tool signatures.
Provide focused analysis, including reverse malware engineering, against intrusion, anomalies, malware, viruses to identify critical information about source, intended target, affected systems or hosts, recommended mitigation measures and risk to mission.
Formulate custom Security Information and Event Management (SIEM) tool content and IDS/IPS signatures to address threats.
Performs security event and incident correlation using information gathered from a variety of sources within the enterprise.
Analyzes and assesses damage to the data / infrastructure as a result of cyber incidents.
Performs cyber incident trend analysis and reporting.
Characterizes and performs analysis of network traffic and system data to identify anomalous activity and potential threats to resources.
Provides detection, identification, and reporting of possible cyber-attacks/intrusions, anomalous activities, and misuse activities.
Create and deploy threat-based signatures for operational intrusion detection capabilities.
Create and implement detection rules from intelligence reporting.

Requirements

Minimum/General Experience: 5+ years of related experience.
B.S. or 4+ additional years of technical experience.
Experience with modern Windows, UNIX, Linux, network operating systems, databases, and virtual computing.
Experience with Splunk.
DoD 8570 certification meeting IAT Level II (GSEC, Security+, SSCP, or CCNA-Security) required.
CNDSP-A (GCIA, GCIH, or CEH) or CNDSP-IR (GCIH, CSIH, or CEH) certification required.
Experience performing analysis of network traffic and correlating diverse security logs to perform recommendations for signature development.
Knowledge with implementation of counter-measures or mitigating controls.
Ability to support incident response and forensic operations as required to include static/dynamic malware analysis and reverse engineering.
Experience with enterprise security tools, including Security information and event management (SIEM), Threat intelligence platforms (TIPs), or Network monitoring tools.
Experience in creating, modifying, tuning, IDS signatures/SIEM correlation searches and other detection signatures.

Preferred Qualifications

Proficient in Linux operating systems.
Advanced skills in Linux/Unix (command line user - proficient and used in last 6 months).
Working knowledge of current COTS Cybersecurity technologies.
Familiar with MITRE ATT&CK Framework.

Security Clearance Requirements

TS/SCI w/Poly.

Physical Requirements

Must be able to remain in a stationary position 50%.
Constantly operates a computer and other office productivity machinery, such as a calculator, copy machine and computer printer.

Compensation

The projected compensation range for this position is $99,200.00-$164,600.00. There are differentiating factors that can impact a final salary/hourly rate, including, but not limited to, Contract Wage Determination, relevant work experience, skills and competencies that align to the specified role, geographic location (For Remote Opportunities), education and certifications as well as Federal Government Contract Labor categories. In addition, ManTech invests in its employees beyond just compensation. ManTech's benefits offerings include, dependent upon position, Health Insurance, Life Insurance, Paid Time Off, Holiday Pay, Short Term and Long Term Disability, Retirement and Savings, Learning and Development opportunities, wellness programs as well as other optional benefit elections.

For all positions requiring access to technology/software source code that is subject to export control laws, employment with the company is contingent on either verifying U.S.-person status or obtaining any necessary license. The applicant will be required to answer certain questions for export control purposes, and that information will be reviewed by compliance personnel to ensure compliance with federal law. ManTech may choose not to apply for a license for such individuals whose access to export-controlled technology or software source code may require authorization and may decline to proceed with an applicant on that basis alone.

ManTech International Corporation, as well as its subsidiaries proactively fulfills its role as an equal opportunity employer. We do not discriminate against any employee or applicant for employment because of race, color, sex, religion, age, sexual orientation, gender identity and expression, national origin, marital status, physical or mental disability, status as a Disabled Veteran, Recently Separated Veteran, Active Duty Wartime or Campaign Badge Veteran, Armed Forces Services Medal, or any other characteristic protected by law.

If you require a reasonable accommodation to apply for a position with ManTech through its online applicant system, please contact ManTech's Corporate EEO Department at (703) 218-6000. ManTech is an affirmative action/equal opportunity employer - minorities, females, disabled and protected veterans are urged to apply. ManTech's utilization of any external recruitment or job placement agency is predicated upon its full compliance with our equal opportunity/affirmative action policies. ManTech does not accept resumes from unsolicited recruiting firms. We pay no fees for unsolicited services.

If you are a qualified individual with a disability or a disabled veteran, you have the right to request an accommodation if you are unable or limited in your ability to use or access https://mantech.avature.net/en_US/careers (https://sandboxmantech1.avature.net/en_US/careers) as a result of your disability. To request an accommodation please click careers@mantech.com and provide your name and contact information.

  • Denver, Colorado, United States Cyber Defense Technologies Full time

    Cyber Defense Technologies is seeking a highly skilled and motivated Junior Security Architect to join our team in Denver, Colorado. The ideal candidate will work with internal team members to ensure the systems are functional, secure, and scalable. The systems and networks developed will be used to collect and process data and improve the customer's...


  • Denver, Colorado, United States Cyber Defense Technologies Full time

    Job Summary:Cyber Defense Technologies is seeking a highly skilled Systems Security Engineer to design, test, and implement secure operating systems, networks, and security monitoring and tuning to protect sensitive data and mitigate cybersecurity risks.Key Responsibilities:Design and implement security measures to safeguard systems, networks, and...


  • Denver, Colorado, United States Cyber Defense Technologies Full time

    Job Summary:Cyber Defense Technologies (CDT) is seeking a highly skilled and motivated Security Architect to join our team in a dynamic and challenging environment. The ideal candidate will work with internal team members to ensure the systems are functional, secure, and scalable.Key Responsibilities:Develop detailed security architecture that includes...


  • Denver, Colorado, United States Revinate Full time

    Job DescriptionRevinate is seeking an experienced Cyber Security Engineer to lead our Security Operations Function.About RevinateWe are a leading provider of direct revenue-generating solutions in the hospitality industry. Our mission is to deliver hoteliers scalable direct revenue and profits from data-driven solutions that cultivate deeper relationships...


  • Denver, Colorado, United States Sev1Tech Full time

    Cybersecurity Engineer PositionWe are seeking a highly skilled and motivated senior Cybersecurity Engineer to join our dynamic team at Sev1Tech LLC.The ideal candidate will have a strong background in cybersecurity, with experience in designing, implementing, and managing security measures to protect our IT infrastructure.This role involves ensuring the...


  • Denver, Colorado, United States ManTech Full time

    Cyber Security Engineer Job DescriptionManTech is seeking a highly skilled Cyber Security Engineer to join our team in Aurora, CO. As a Cyber Security Engineer, you will be responsible for maintaining an infrastructure of virtualized intrusion detection and network traffic analysis sensors located in multiple locations.Key Responsibilities:Maintains an...


  • Denver, Colorado, United States Cyber Defense Technologies Full time

    Cyber Defense Technologies is seeking a highly skilled and motivated Penetration Tester to assess the security posture of systems and applications by identifying and exploiting vulnerabilities. The ideal candidate will be responsible for comprehensive testing of cyber mitigation controls, through test plan creations, test case development and...


  • Denver, Colorado, United States Experis Full time

    Job Description:This is a DevOps Cyber Security role in Information Security. The candidate will work in a fast-paced environment, identifying and responding to cyber security events, while developing automations that enable efficient and timely responses to mitigate malicious actors.The Network Detection and Response (NDR) team in the Global Information...


  • Denver, Colorado, United States Bank of America Full time

    Cyber Security ProfessionalBank of America is seeking a highly experienced cyber security professional to join our Purple Team function within the Cyber Threat Hunt, Intelligence and Defense organization.As a Senior Purple Team member, you will assist in the review, development, testing, and implementation of security initiatives across a large and complex...


  • Denver, Colorado, United States Bank of America Full time

    Purple Team EngineerAt Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Our Responsible Growth strategy is built on a foundation of trust, integrity, and respect for our teammates, communities, and shareholders.Job SummaryWe are seeking an experienced Purple Team Engineer to join...


  • Denver, Colorado, United States Bank of America Full time

    Cyber Security Senior ResearcherBank of America is seeking a highly experienced cyber security professional to join our Purple Team function within the Cyber Threat Hunt, Intelligence and Defense organization. As a Senior Purple Team member, you will assist in the review, development, testing, and implementation of security initiatives across a large and...


  • Denver, Colorado, United States Jollibee Foods Corp (USA) Full time

    Job DescriptionJollibee Foods Corp (USA) is seeking a highly skilled Cyber Security Analyst to oversee the company's cyber security, including compliance with Payment Card Industry (PCI) Data Security Standard (PCI DSS), disaster recovery, and database protection.This role requires a strategic vision and technical expertise to protect Jollibee and the team...


  • Denver, Colorado, United States Bank of America Full time

    Job Title: Senior Cloud Security EngineerJob Summary:Bank of America is seeking an experienced Senior Cloud Security Engineer to join our Cyber Security Operations team. The ideal candidate will have deep knowledge of security controls, tools, features, and operations for AWS.Key Responsibilities:- Implement and enhance detective capabilities in a fully...


  • Denver, Colorado, United States Bank of America Full time

    Job Title: Senior Threat HunterJoin Bank of America's Cyber Security Defense function as a Senior Threat Hunter, where you will play a critical role in strengthening the bank's cyber security posture through research, threat simulations, threat hunting, and offensive security engagements.Role Responsibilities:Analyze and correlate large data sets to uncover...


  • Denver, Colorado, United States Hispanic Technology Executive Council Full time

    About the Role:Bank of America is seeking an experienced cyber security professional to join our Purple Team function within the Cyber Threat Hunt, Intelligence and Defense organization. As a Purple Team member, you will assist in the review, development, testing, and implementation of security initiatives across a large and complex environment.Key...


  • Denver, Colorado, United States Hispanic Technology Executive Council Full time

    About the Role:We are seeking an experienced cyber security professional to join our Purple Team function within the Cyber Threat Hunt, Intelligence and Defense organization at Hispanic Technology Executive Council.As a Purple Team member, you will assist in the review, development, testing, and implementation of security initiatives across a large and...


  • Denver, Colorado, United States Hispanic Technology Executive Council Full time

    Job Title: Cyber Security Professional - Purple TeamJob Summary:Bank of America is seeking an experienced cyber security professional to join our Purple Team function within the Cyber Threat Hunt, Intelligence and Defense organization. As a Purple Team member, you will assist in the review, development, testing, and implementation of security initiatives...


  • Denver, Colorado, United States Sumo Logic Full time

    Unlock the Power of Cloud-Native SecurityAt Sumo Logic, we're revolutionizing the way companies approach security detection. Our cloud-native platform is designed to process hundreds of billions of events from security-relevant data sources daily. As a Senior Software Engineer I, Security Detections, you'll play a crucial role in building and scaling our...


  • Denver, Colorado, United States Bank of America Full time

    Job Title: Purple Team Cyber Security SpecialistBank of America is seeking an experienced cyber security professional to join our Purple Team function within the Cyber Threat Hunt, Intelligence and Defense organization.As a Purple Team member, you will assist in the review, development, testing, and implementation of security initiatives across a large and...


  • Denver, Colorado, United States Cyber Defense Technologies Full time

    Cyber Defense Technologies is seeking a highly skilled Senior Systems Security Engineer to design, test, and implement secure operating systems, networks, and security monitoring and tuning to ensure the protection of sensitive data and mitigate cybersecurity risks.### Key Responsibilities:* Design and implement security measures to safeguard systems,...