MANTECH seeks a motivated, career, and team-oriented Principal Cybersecurity Engineer to support a major federal homeland security program in Washington, DC or Chandler, AZ . As part of this mission, you will serve as a senior technical authority driving enterprise-wide threat defense, operational resilience, and advanced security analytics. This is a unique opportunity to mature security operations for a large-scale federal SOC, leveraging continuous threat exposure models, zero trust principles, and next-generation security automation.

Key Responsibilities:

Implement, optimize, and tune comprehensive offensive and defensive security capabilities across complex, enterprise-scale environments. Lead end-to-end incident handling, including scoping, timeline reconstruction, root cause analysis, and impact assessment across cloud, network, endpoint, and mobile infrastructures. Perform static and dynamic malware reverse engineering (sandboxing, code analysis) to extract Indicators of Compromise (IOCs) and analyze C2 infrastructure. Align security architecture, detection tools, and incident telemetry with MITRE ATT&CK and D3FEND frameworks. Correlate digital forensics findings with threat intelligence, SOC alerts, and adversary Tactics, Techniques, and Procedures (TTPs). Provide expert guidance on network security architecture, operating system hardening, and multi-cloud security posture management.

Minimum Qualifications:

Bachelor's Degree in Cybersecurity, Computer Science, Information Technology, or a related field. Minimum of 5 years of specialized cybersecurity experience in enterprise or federal SOC environments. Must hold at least ONE primary certification: CISSP (or Associate), CCSP, SSCP, GMON, GCIH, GCIA, CEH, or CASP+. Must hold at least ONE secondary certification from the DoD 8140 CSSP Analyst, Infrastructure Support, or Incident Responder list. Demonstrated hands-on experience with security event correlation tools, digital forensics, and binary analysis.

Preferred Qualifications:

Master's Degree in a technical discipline. Direct experience supporting federal cyber defense operations (DHS, DoD, or IC). Practical knowledge of Zero Trust Architecture (ZTA) implementation and cloud-native security controls.

Clearance Requirements:

Active Secret Clearance required; must be eligible to obtain and maintain a Top Secret/SCI Clearance. Must be a U.S. Citizen and able to obtain and maintain agency suitability/EOD prior to starting.

Physical Requirements:

Must be able to remain in a stationary position 50% of the time. Occasionally move about inside the office to access file cabinets, office machinery, or to communicate with co-workers and customers.