Cyber Incident Manager — Govt-Grade IR & Defense

Nightwing Technologies, LLC; Arlington (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

Nightwing Technologies, LLC is seeking a Cyber Incident Manager to support a U.S. Government customer in Arlington, VA. The role focuses on onsite incident response, investigations, and mitigation planning for cyber-attacks across enterprise networks.

Candidates must have active TS/SCI, US citizenship, and 5+ years in cyber incident management or cybersecurity operations. Responsibilities include triaging incidents, researching remediation steps, analyzing logs, and coordinating with internal

Qualifications

• US citizenship and an active TS/SCI clearance are required.
• 5+ years of directly relevant experience in cyber incident management or cybersecurity operations.
• Knowledge of incident response methodologies and security best practices.

Responsibilities

• Correlate incident data to identify trends in reported incidents.
• Recommend defense in depth principles and practices.
• Perform CND incident triage to determine scope, urgency, and impact.
• Research known resolution steps to mitigate incidents.
• Apply cybersecurity concepts to detect intrusions and analyze logs.
• Monitor external data sources for threat condition currency and impact.
• Identify incident causes and gather background information from external entities.
• Receive and analyze network alerts and determine possible causes.
• Track CND incidents from detection to resolution and coordinate with teams.
• Limited shift work may be required; triage incidents for IOCs and escalate.

Skills

US Citizenship

TS/SCI clearance

DHS Suitability

5+ yrs experience

Incident response methodologies

NIST 800-62

FISMA standards

Incident prioritization

Phishing tactics understanding

Vulnerability recognition

CND basics

Log data analysis

Defense in depth

Job description

Nightwing Technologies, LLC is seeking a Cyber Incident Manager to support a U.S. Government customer in Arlington, VA. The role focuses on onsite incident response, investigations, and mitigation planning for cyber-attacks across enterprise networks.

Candidates must have active TS/SCI, US citizenship, and 5+ years in cyber incident management or cybersecurity operations. Responsibilities include triaging incidents, researching remediation steps, analyzing logs, and coordinating with internal