"Alerted.org

**ManTech** seeks a motivated, career and customer-oriented **Junior Cybersecurity SIEM Monitoring Analyst** to join our team in the **DC, Maryland, and Virginia (DMV) area** .

We are seeking a highly skilled SIEM Engineer/Specialist to join our Network Operations Security Center (NOSC). The ideal candidate will be an expert in Security Information and Event Management (SIEM) systems, responsible for designing, implementing, and maintaining SIEM solutions to protect DHS's networks and information systems from cyber threats and configures tools, settings, alerts, and notifications to improve the enterprise security and resilience capabilities, including implementation of Security Orchestration and Automation for Response (SOAR) capabilities. The specialist contributes to and executes the design, development, and implementation of the NOSC's enterprise attack sensing and warning (AS&W) security program, providing monitoring and analysis (M&A) capabilities for the enterprise security program. Develops and implements the enterprise Security Information and Event Monitoring (SIEM) strategy and tool implementation via Splunk, designing data flow diagrams and alert feed architectures to ensure seamless alert integration and monitors security queues and tool alerts to identify issues in advance. Participates in response activities to all major enterprise outages.

Responsibilities include, but are not limited to:

+ Develop and implement the enterprise Security Information and Event Monitoring (SIEM) strategy and tool implementation via Splunk, design data flow diagrams and alert feed architectures to ensure seamless alert integration

+ Develop and maintain SIEM architecture, including data sources, log management, and alerting mechanisms

+ Configure tools, settings, alerts, and notifications to improve the enterprise security and resilience capabilities, including implementation of Security Orchestration and Automation for Response (SOAR) capabilities; develops content for, e.g., rule implementation on network border devices (firewalls, routers, switches, IDS/IPS, Taclanes, etc.).

+ Develop content for rule implementation on network border devices (firewalls, routers, switches, IDS/IPS, Taclanes, etc.)

+ Monitor security events and alerts, conducting detailed analysis to identify potential security incidents; participates in response activities to all major enterprise outages

+ Collaborate with incident response teams to investigate and remediate security incidents.

+ Perform regular system health checks, maintenance, and upgrades to ensure SIEM performance and reliability

Minimum Qualifications:

+ Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field

+ 1+ year of experience in cybersecurity with a focus on SIEM engineering and operations

+ Proficiency with SIEM platforms (e.g., Splunk, Swimlane, ArcSight, QRadar, LogRhythm)

+ Strong understanding of network protocols, system logs, and security event correlation

+ Experience in developing and tuning SIEM use cases, correlation rules, and alerts

+ Relevant certifications such as CISSP, CISM, CEH, or SIEM-specific certifications (e.g., Splunk Certified Power User) are highly desirable

Preferred Qualifications:

+ Previous Network Operations Center (NOC) or IT Operations experience

+ Familiarity with DHS policies and procedures.

+ Knowledge of broader cybersecurity frameworks (e.g., NIST, ISO 27001).

+ Understanding of ITIL4 principles

+ Master’s Degree

Clearance Requirements:

+ Must have a current/active Secret clearance with the ability to obtain and maintain a TS/SCI.

+ The ability to obtain and maintain a DHS EOD suitability is required prior to starting this position.

Physical Requirements:

+ Must be able to remain in a stationary position 50%

+ Constantly operates a computer and other office productivity machinery, such as a calculator, copy machine and computer printer

+ The person in this position needs to occasionally move about inside the office to access file cabinets, office machinery, etc.

ManTech International Corporation, as well as its subsidiaries proactively fulfills its role as an equal opportunity employer. We do not discriminate against any employee or applicant for employment. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

If you are a qualified individual with a disability and require a reasonable accommodation to apply for a position with ManTech through its online applicant system, please email us at [email protected] and provide your name and contact information.