Cyber Security Automation Engineer

MANTECH seeks a motivated, career and customer-oriented Cyber Security Automation Engineer to join our team in Boulder, CO or Fairmont, WV. This role is vital for providing automation support to a SOC team that provides 24/7/365 coverage to protect critical government infrastructure. Responsibilities include but not limited to: Tool Development & Automation: Write clean, maintainable code to automate repetitive security tasks, build custom triage tools, automate incident response, streamline cybersecurity operations and other tasks as assigned. Code Review & Debugging: Assist senior engineers in reviewing internal applications and scripts for logic flaws, bugs, and security vulnerabilities. Cyber Threat Integration: Learn to analyze system logs, threat intelligence feeds, and vulnerability scans to write scripts that proactively flag malicious activity. Prototyping: Collaborate on the rapid prototyping of new cyber defense automation capabilities and proof-of-concept demonstrations. Documentation: Maintain clear documentation for the tools you build, ensuring the broader security team can leverage your code effectively. Minimum Qualifications: Must be a U.S Citizen with an active/current Secret clearance prior to starting this position. Bachelor’s degree in Cybersecurity, Computer Science, or a related field (or equivalent military/professional experience) is preferred. 0-2 years of experience in a relevant Cybersecurity technical support environment with a bachelor’s degree or 6 years relevant experience with no relevant bachelor’s degree. For candidates with a relevant associate’s degree instead of bachelor’s degree, at least 3 years relevant technical experience. Proficient in at least one major programming language (e.g., Python, Java, JavaScript, etc) with a solid understanding of data structures, algorithms, and OOP concepts. Preferred Qualifications: Active TS/SCI Familiarity with REST APIs both as a maintainer and as an end user. An understanding of cybersecurity triage and incident response for government enterprises, use of SIEM, SOAR, and other tools to automate cybersecurity workflows. Comfortable working in a Linux/Unix command-line environment, using Git for version control, and CI/CD for deployment. A persistent, curious approach to debugging and a genuine enthusiasm for keeping up with the ever-evolving cyber threat landscape. Clearance Requirements: Must be a US Citizen with a current/active secret clearance. Physical Requirements: Must be able to remain in a stationary position 50% Constantly operates a computer and other office productivity machinery, such as a calculator, copy machine and computer printer.