Detection Engineering Lead
Company: MANTECH
Role summary
Detection Engineering Lead is a full-time role at MANTECH in Herndon, Virginia, United States (on-site). Posted 2026-10-02. Salary: USD 141,500–236,000 per year. Experience level: 5-10. No degree required.
- Job title
- Detection Engineering Lead
- Company
- MANTECH
- Location
- Herndon, Virginia, United States
- Work arrangement
- on-site
- Employment type
- full-time
- Category
- Software Engineering
- Salary
- USD 141,500–236,000 per year
- Experience level
- 5-10
- Degree required
- No
- Date posted
- 2026-10-02
Here's an exciting opportunity to lead detection engineering efforts and make a real impact in national security, no degree required! This role offers a generous salary range and the chance to work on cutting-edge projects with a well-established company. It's a great chance to grow your career and contribute to vital work.
Job description
Description & Requirements
Unlock the secrets of intelligence with MANTECH! Join a dynamic team at the forefront of national security, providing advanced solutions to government intelligence agencies. Since 1968, we’ve been solving the toughest challenges with groundbreaking tech. Explore thrilling projects in Digital Transformation, Cybersecurity, IT, Data Analytics and Software Development. Elevate your career and make a difference. Your adventure begins now—unleash your potential with MANTECH!
MANTECH seeks a motivated and customer-oriented Cyber Detection Engineering Lead to join our team in McLean, VA . In this role you lead the mission to enhance cybersecurity detection and response capabilities by developing high-fidelity detection logic, automating security workflows, and strengthening threat-hunting operations. This role serves as a technical leader and liaison with customer staff, overseeing project and task workflow while improving the organization’s ability to identify, analyze, and respond to evolving cyber threats.
Responsibilities include but are not limited to:
Developing, optimizing, and deploying custom detection rules across SIEM platforms and creating signatures and detection rules for malware and network-based threats
Building, testing, and tuning security analytics pipelines to reduce false positives and improve alert fidelity
Designing and implementing SOAR playbooks to streamline and enhance security operations
Automating threat intelligence ingestion, correlation, and alerting mechanisms
Developing integration scripts between security tools and data sources to enhance visibility and response capabilities
Developing and maintaining robust detection logic mapped to MITRE ATT&CK techniques
Conducting continuous security log analysis to identify anomalies and potential threats
Collaborating with Incident Response teams to provide detection logic for emerging threats
Leveraging EDR solutions to detect and investigate endpoint threats
Analyzing Windows internals and system logs to identify malicious activities and forensic artifacts
Serving as a liaison with customer staff and overseeing project and task workflow to ensure successful mission execution
Minimum Qualifications:
High School Diploma and 7+ years of experience in cybersecurity with a focus on detection engineering, threat hunting, incident response, or CNO/CNE
Experience with Python or a similar language for automation and data analysis
Hands-on experience with SIEM platforms such as Splunk, ELK, Sentinel, Chronicle, or similar technologies
Experience applying the MITRE ATT&CK framework for adversary tactics and techniques mapping
Experience with YARA, Snort, Suricata, or other signature-based detection technologies
Experience with Windows internals and forensic artifacts for endpoint security investigations
Preferred Qualifications:
Bachelors degree in Cybersecurity, Computer Science or other relevant field
Experience with SOAR solutions and security automation workflows
Experience with threat intelligence platforms and integrating threat intelligence feeds into security operations
Prior experience in penetration testing, red teaming, or reverse engineering
Certifications such as GCDA, GCIH, GCFA, OSCP, or Splunk Certified Security Professional
Clearance Requirements:
Active/current TS/SCI with polygraph
Physical Requirements:
Must be able to remain in a stationary position 50% of the time
The projected compensation range for this position is $141,500.00-$236,000.00. There are differentiating factors that can impact a final salary/hourly rate, including, but not limited to, Contract Wage Determination, relevant work experience, skills and competencies that align to the specified role, geographic location (For Remote Opportunities), education and certifications as well as Federal Government Contract Labor categories. In addition, MANTECH invests in its employees beyond just compensation. MANTECH’s benefits offerings include, dependent upon position, Health Insurance, Life Insurance, Paid Time Off, Holiday Pay, short-term and long-term Disability, Retirement and Savings, Learning and Development opportunities, wellness programs as well as other optional benefit elections.
MANTECH considers all qualified applicants for employment without regard to disability or veteran status or any other status protected under any federal, state, or local law or regulation.
If you need a reasonable accommodation to apply for a position with MANTECH, please email us at careers@mantech.com and provide your name and contact information.
General information
Requisition #
R70355
Locations
USA-VA-McLean, USA-VA-Herndon
Posting Date
08/28/2026
Security Clearance Required
TS/SCI w/ Poly
Remote Type
Onsite
Time Type
Full time