Cybersecurity Analyst

MANTECH seeks a motivated, career and customer-oriented Cybersecurity Analyst to join our team in Boulder, CO.

The Cybersecurity Analyst will leverage their strong technical background and knowledge to support 24/7/365 Cybersecurity Operations Center (CSOC) operations, protecting critical government infrastructure and analyzing platform alerts.

This position requires shifts that may include days, nights, and/or weekends. Potential shifts include Saturday & Sunday 8:00 PM - 8:00 AM or 8:00AM - 8:00PM. There are also 8-hour shifts on Monday - Friday 8:00AM - 4:00PM, 4:00PM to 12:00AM, or 12:00AM to 8:00AM.

Responsibilities include but are not limited to:

• Monitoring security consoles and identifying platform alerts (SIEM, IDS/IPS, Firewall, EDR) for potential malicious activity.
• Performing initial analysis and triaging of security events to determine severity and impact.
• Maintaining detailed logs of activity and creating initial incident reports for escalation.
• Reviewing network traffic patterns and system logs to identify unauthorized access or anomalies.
• Assisting with health and maintenance checks of security tools and sensors.
• Coordinating with team members and shift leads to ensure seamless handoff between shift operations.
• Working flexible shift schedules, including 12-hour weekend night shifts (Sat/Sun 8 PM - 8 AM) or assigned weekday shifts to complete a 40-hour work week.

Minimum Qualifications:

• Bachelor's degree in Cybersecurity, Computer Science, or a related field; OR an Associate degree with 3+ years of relevant experience; OR High School Diploma/GED with 6+ years of equivalent military/professional experience.
• Understanding of TCP/IP networking, common protocols, and Windows/Linux operating systems.
• Understanding of security alerts, logs, event analysis, and common attack vectors (phishing, malware, brute force, lateral movement).
• Ability to work required shift schedules as assigned, including night and weekend hours.

Preferred Qualifications:

• Experience in a SOC, NOC, or IT-related technical support environment.
• Active Security+, CySA+, GCIH, or similar industry certification.
• Experience with enterprise security tools such as Splunk, ArcSight, or Sentinel.

Clearance Requirements:

• Current/active Secret clearance with the ability to obtain a Top Secret clearance

Physical Requirements:

• Must be able to remain in a stationary position 50%.