Cybersecurity Operations Center Hunt Analyst

MANTECH seeks a motivated, career and customer-oriented Cybersecurity Operations Center Hunt Analyst to join our team in Chantilly, VA.The CSOC Hunt Analyst will leverage their strong technical background and knowledge to support the customer’s cyber defense operations, to include proactively discovering issues, monitoring and triaging security alerts, conducting initial investigations, documenting findings, escalating incidents, and maintaining situational awareness across the monitored environment. Responsibilities include but are not limited to: Monitoring, acknowledging, investigating, and triaging incidents and alerts across Microsoft Sentinel and Splunk Enterprise Security environments. Writing and modifying Search Processing Language (SPL) and Kusto Query Language (KQL) queries to hunt for suspicious activities, conduct investigations, and analyze time-based security data. Supporting legacy Splunk operations while assisting with the migration of use cases, detections, telemetry, dashboards, and workflows to Microsoft Sentinel. Analyzing security telemetry flows through pipeline platforms such as Cribl Stream or Cribl Edge into SIEM systems and identifying missing or malformed telemetry. Supporting detection engineering by testing correlation searches and analytic rules, validating expected results, and documenting false positives and false negatives. Participating in threat hunts, cyber exercises, tabletop events, and detection-validation activities while utilizing approved AI-assisted tools to enhance research and workflows. Maintaining system baselines and configuration management items, including security event monitoring policies, standard operating procedures, and playbooks.