Job Information
ManTech Cyber Threat Intelligence Lead in Huntsville, Alabama
ManTech seeks a highly skilled and knowledgeable Cyber Threat Intelligence Lead who is responsible for leading a small team of cyber threat intelligence analysts. This position is located on customer site in Huntsville, AL.
Responsibilities include but are not limited to:
Triage information collected from different threat intelligence sources, including internal sources and OSINT, and study the pattern of attacks, their methodology, motive, severity, and threat landscape applicable to client systems.
Enhance the organization’s overall cybersecurity posture by delivering timely, relevant, cyber intelligence information and reports to stakeholders based on gathering, analyzing, and synthesizing complex attack patterns and trends.
Synthesize threat data from diverse sources and identify complex attack patterns and trends. Enrich data with context to provide a more comprehensive understanding of threats, such as attributing specific threats to threat actors or groups.
Provide tactical intelligence that helps the SOC understand the specifics of current threats, including indicators of compromise (IOCs), tactics, techniques, and procedures (TTPs) used by attackers. Assist the SOC during ongoing incidents by providing real-time intelligence updates, context, and guidance to help investigate, contain, and remedy threats.
Offer strategic intelligence to help the organization anticipate long term trends, understand the motivations of threat actors and plan for future cybersecurity challenges.
Actively participate in information-sharing communities and industry groups and collaborate with other organizations to gain and contribute to a collective understanding of the threat landscape.
Conduct threat hunt activities to proactively identify and mitigate potential threats in the environment.
Basic Qualifications:
Bachelor’s degree, preferably in IT, Cybersecurity, Engineering, Computer Science, Mathematics, or related discipline.
7+ years of IT experience with a minimum of 5 years’ experience with cyber intelligence analysis
2+ years of experience performing threat hunts.
2+ years of experience using Splunk.
Demonstrated experience using MITRE ATT&CK framework for cyber threat intelligence and hunting.
Preferred Qualifications:
Hands-on experience with Microsoft Sentinel
GIAC Cyber Threat Intelligence (GCTI) certification
Demonstrated experience using the STRIDE and DREAD threat models for risk assessments and evaluating potential threats.
Experience using open-source/OSINT collection methods and tools to enhance threat intelligence activities.
Experience using threat intelligence sharing platforms and collaborative frameworks, such as Information Sharing and Analysis Centers (ISACs).
Security Clearance Requirements:
- Must possess active Top Secret security clearance with SCI eligibility
Physical Requirements:
Must be able to remain in a stationary position 50%
Constantly operates a computer and other office productivity machinery, such as a calculator, copy machine and computer printer
The person in this position frequently communicates with co-workers, management and customers, which may involve delivering presentations. Must be able to exchange accurate information in these situations.
ManTech International Corporation, as well as its subsidiaries proactively fulfills its role as an equal opportunity employer. We do not discriminate against any employee or applicant for employment. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.
If you are a qualified individual with a disability and require a reasonable accommodation to apply for a position with ManTech through its online applicant system, please email us at careers@mantech.com and provide your name and contact information.