{"id":2092398,"url":"https://alion.io/job/mantech-cybersecurity-operations-center-hunt-analyst","title":"Cybersecurity Operations Center Hunt Analyst","company":{"id":179527,"name":"ManTech","domain":"mantech.com","url":"https://alion.io/company/mantech","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Avature","truth_index":{"grade":"A","score":100,"open_postings":87,"ghost_share":0,"stale_share":0,"repost_share":0.011,"time_to_fill_p50_days":10,"computed_at":"2026-10-22T06:10:10Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Chantilly, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":114600,"max":190200,"currency":"USD","period":"year","gross":null,"usd_annual":190200},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Microsoft Sentinel","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"MITRE ATT&CK","optional":true}],"status":"live","first_seen_at":"2026-10-08T15:06:05Z","employer_posted_date":"2026-10-08","last_verified_at":"2026-10-22T23:09:55Z","board_verified":true,"closed_at":null,"days_open":14,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":14},"description":"Unlock the secrets of intelligence with MANTECH! Join a dynamic team at the forefront of national security, providing advanced solutions to government intelligence agencies. Since 1968, we’ve been solving the toughest challenges with groundbreaking tech. Explore thrilling projects in Digital Transformation, Cybersecurity, IT, Data Analytics and Software Development. Elevate your career and make a difference. Your adventure begins now-unleash your potential with MANTECH!\nMANTECH seeks a motivated, career and customer-oriented Cybersecurity Operations Center Hunt Analyst to join our team in Chantilly, VA.\nThe CSOC Hunt Analyst will leverage their strong technical background and knowledge to support the customer’s cyber defense operations, to include proactively discovering issues, monitoring and triaging security alerts, conducting initial investigations, documenting findings, escalating incidents, and maintaining situational awareness across the monitored environment.\nResponsibilities include but are not limited to:\nMonitoring, acknowledging, investigating, and triaging incidents and alerts across Microsoft Sentinel and Splunk Enterprise Security environments.\nWriting and modifying Search Processing Language (SPL) and Kusto Query Language (KQL) queries to hunt for suspicious activities, conduct investigations, and analyze time-based security data.\nSupporting legacy Splunk operations while assisting with the migration of use cases, detections, telemetry, dashboards, and workflows to Microsoft Sentinel.\nAnalyzing security telemetry flows through pipeline platforms such as Cribl Stream or Cribl Edge into SIEM systems and identifying missing or malformed telemetry.\nSupporting detection engineering by testing correlation searches and analytic rules, validating expected results, and documenting false positives and false negatives.\nParticipating in threat hunts, cyber exercises, tabletop events, and detection-validation activities while utilizing approved AI-assisted tools to enhance research and workflows.\nMaintaining system baselines and configuration management items, including security event monitoring policies, standard operating procedures, and playbooks.\nMinimum Qualifications:\nBachelor’s degree in Computer Science, Information Technology, Cybersecurity, and 5+ years of related technical experience or High School/GED and 7+ years of related technical experience \nExperience performing cybersecurity alert triage, initial incident investigation, and writing/troubleshooting basic-to-intermediate SPL and KQL queries.\nDemonstrated experience filtering, summarizing, correlating, and analyzing time-based security data across endpoint, identity, network, and cloud audit logs.\nUnderstanding of telemetry pipelines, data onboarding, normalization, parsing, routing, enrichment, and field mapping concepts.\nExperience creating, maintaining, and communicating complex technical documentation, including standard operating procedures, investigation notes, and playbooks.\nMust meet applicable DoD 8140/8570 workforce requirements, including an active IAT Level II certification (e.g., Security+ CE, CySA+, GSEC, CCNA Security, or CASP+ CE).\nPreferred Qualifications:\nDemonstrated working knowledge of Microsoft Sentinel (incidents, analytics rules, workbooks, KQL) and Splunk Enterprise Security (notable events, SPL, dashboards).\nExperience supporting an operational transition or migration from Splunk to Microsoft Sentinel and working with Cribl Stream/Edge.\nRelevant technical certifications such as Microsoft SC-200, Splunk Core/Enterprise Security, Cribl certification, or advanced cyber certifications.\nFamiliarity with MITRE ATT&CK, threat-informed defense, adversary emulation, automated workflows, and AI-enabled cybersecurity tooling.\nClearance Requirements:\nAn active TS/SCI with Polygraph is required\nPhysical Requirements:\nMust be able to remain in a stationary position 50% of the time.\nNeeds to occasionally move about inside the office to access file cabinets, office machinery, etc.\nFrequently communicates with co-workers, management, and customers, which may involve delivering presentations. Must be able to exchange accurate information in these situations.\nThe projected compensation range for this position is $114,600.00-$190,200.00. There are differentiating factors that can impact a final salary/hourly rate, including, but not limited to, Contract Wage Determination, relevant work experience, skills and competencies that align to the specified role, geographic location (For Remote Opportunities), education and certifications as well as Federal Government Contract Labor categories. In addition, MANTECH invests in its employees beyond just compensation. MANTECH’s benefits offerings include, dependent upon position, Health Insurance, Life Insurance, Paid Time Off, Holiday Pay, short-term and long-term Disability, Retirement and Savings, Learning and Development opportunities, wellness programs as well as other optional benefit elections.\nMANTECH considers all qualified applicants for employment without regard to disability or veteran status or any other status protected under any federal, state, or local law or regulation.\nIf you need a reasonable accommodation to apply for a position with MANTECH, please email us at  and provide your name and contact information.","description_format":"text","description_chars":5360,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"high_school","optional":false},"security_clearance":true,"languages":[]},"benefits":["Health insurance","Life insurance","Wellness"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Incident Response","Security Operations"],"lifecycle":[{"event":"open","at":"2026-10-08T15:06:05Z"}],"visa":[],"liveness":{"score":40,"band":"fade","label":"Fading","p_open":1,"p_active":0.728,"p_room":0.55,"age_days":13,"expected_fill_days":10,"reasons":["conf:2","velocity","win:tail","comp:brand"],"computed_at":"2026-10-22T06:10:10Z"},"pay":{"stated_usd_annual":190200,"is_top_pay":true},"html_url":"https://alion.io/job/mantech-cybersecurity-operations-center-hunt-analyst","json_url":"https://alion.io/job/mantech-cybersecurity-operations-center-hunt-analyst.json","meta":{"generated_at":"2026-10-23T01:36:37Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2685,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-24T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":179527},"rest":"https://alion.io/mcp/rest/get_company?id=179527"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmantech-cybersecurity-operations-center-hunt-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmantech-cybersecurity-operations-center-hunt-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmantech-cybersecurity-operations-center-hunt-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/mantech-cybersecurity-operations-center-hunt-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmantech-cybersecurity-operations-center-hunt-analyst"}]}