Cyber Incident Manager (TS/SCI)

Nightwing; Arlington (VA); On-site; USD 99,000 - 206,000; Full time

Benefits offered by this job

Medical insurance

Vision insurance

Dental insurance

401k plan

PTO

Holidays

Job summary

Nightwing is seeking a Cyber Incident Manager to support a U.S. Government customer in Arlington, VA. The role involves coordinating incident response, performing CND triage, and developing mitigation plans for cyber-attacks on large IT environments.

The candidate will analyze alerts, track incidents, and coordinate across teams to restore services. The position requires a TS/SCI clearance, 5+ years of relevant experience, and familiarity with incident response methodologies, attack methods, and

Qualifications

• 5+ years of directly relevant experience in cyber incident management or cybersecurity operations.
• Knowledge of incident response and handling methodologies.
• Familiarity with NIST 800-62 and FISMA reporting requirements.
• Ability to prioritize incidents and describe phishing tactics.
• Knowledge of general attack stages and vulnerabilities.

Responsibilities

• Correlating incident data to identify trends in reported incidents.
• Recommending defense in depth principles and practices.
• Performing Computer Network Defense incident triage (scope, urgency, impact).
• Researching resolution steps or workarounds for mitigation.
• Applying cybersecurity concepts to detection and defense of intrusions; optional log data analysis.

Skills

U.S. Citizenship

Active TS/SCI clearance

Incident management

Cybersecurity operations

Incident response

Education

BS in Incident Management / Cybersecurity

HS Diploma with related experience

Job description

Nightwing is seeking a Cyber Incident Manager to support a U.S. Government customer in Arlington, VA. The role involves coordinating incident response, performing CND triage, and developing mitigation plans for cyber-attacks on large IT environments.

The candidate will analyze alerts, track incidents, and coordinate across teams to restore services. The position requires a TS/SCI clearance, 5+ years of relevant experience, and familiarity with incident response methodologies, attack methods, and