Cloud Forensics Analyst III – Incident Response

Nightwing Group; Arlington, Northern (VA, KY); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Nightwing Group in Arlington, VA is seeking a Cloud Forensic Analyst III to support on-site incident response for a U.S. Government customer. You will conduct investigations to determine breach severity, develop remediation plans, and assist with restoration of services.

Requirements include U.S. citizenship, active TS/SCI clearance, 8+ years in network investigations, deep knowledge of CND policies, TCP/IP, and experience with SIEMs like Splunk.

Qualifications

• 8+ years of direct experience in network investigations.
• Strong knowledge of CND policies, procedures and MITRE ATT&CK.
• Experience reconstructing a malicious attack from network traffic.
• Ability to interface with government customers on site.

Responsibilities

• Assist Government lead with on-site incident response investigations.
• Analyze network activity to identify security concerns and provide remediation guidance.
• Collect and analyze PCAPs, domains, URI data, certificates for incident response.
• Publish Computer Network Defense guidance and incident findings to appropriate audiences.
• Coordinate with teams across physical locations to support engagements.

Skills

Network forensics

Incident response

Threat hunting

Splunk SIEM

TCP/IP protocols

WiFi networking

Cloud forensics

Team collaboration

Education

BS in Computer Science, Cyber Security, or related field

Tools

Splunk

Wireshark

PCAP analysis tools

Job description

Nightwing Group in Arlington, VA is seeking a Cloud Forensic Analyst III to support on-site incident response for a U.S. Government customer. You will conduct investigations to determine breach severity, develop remediation plans, and assist with restoration of services.

Requirements include U.S. citizenship, active TS/SCI clearance, 8+ years in network investigations, deep knowledge of CND policies, TCP/IP, and experience with SIEMs like Splunk.