ManTech seeks a motivated, career and customer-oriented Cloud Security Engineer to join our team in Herndon, VA.
Join a team of cybersecurity experts that protects and defends the largest target in the world. As a Cloud Security Engineer on our team, you will utilize the latest tools available and assist in creating new ones while allowing you to advance the nation's information security posture.
Responsibilities include but are not limited to:
Design and champion the strategy for detecting and responding to cyber incidents within Oracle Cloud Infrastructure (OCI) or Google Cloud Platform (GCP)
Create advanced detection rules and tradecraft to uncover sophisticated cloud-based attacks
Optimize data pipelines to fuel rapid incident analysis and proactive threat hunting in the cloud
Serve as the Subject Matter Expert (SME) during critical cloud security incidents, guiding the CSOC team to swift resolution
Continuously evaluate emerging cloud security tools and techniques to enhance our defenses and response capabilities
Partner with cross-functional teams and mentor less experienced analysts to build a stronger cloud security posture across the organization
Minimum Qualifications:
High School Diploma and 15+ years of experience in cloud or cyber security or Bachelor’s degree and 11+ years of experience
5+ years of experience in cyber incident response
3+ years’ experience architecting, engineering, implementing, or securing solutions within Google Cloud Platform (GCP) OR Oracle Cloud Infrastructure (OCI)
2+ years’ experience with data ingestion, processing, and analysis of data relevant to security investigations, such as log management, basic ETL concepts or similar.
Experience with at least one scripting language, such as Python or Bash, for task automation or security analysis
Experience with cloud security principles, including identity and access management, network security, and data protection within the chosen platform (GCP or OCI)
Preferred Qualifications:
Degree in Computer Science, Information Security, or a related technical field
Relevant Certifications such as CISSP, CCSP, CCSK, GCFA, GCIH, or cloud-specific security certifications (e.g., Google Cloud Security Engineer, Oracle Cloud Security Architect)
Experience in security services and best practices within either Google Cloud Platform (GCP Security Command Center, Chronicle, IAM, Networking) OR Oracle Cloud Infrastructure (OCI Cloud Guard, Security Zones, IAM, Networking)
Experience leading and coordinating complex cloud security incident investigations, including forensic analysis and containment strategies
Ability to develop and implement automation scripts and workflows (e.g., Python, Cloud Functions/Lambdas, SOAR platforms) to enhance incident response efficiency
Clearance Requirements: Must have a current/active TS/SCI w/Polygraph
Physical Requirements: The person in this position must be able to remain in a stationary position 50% of the time.