Cyber Incident Manager (TS/SCI)

Node; United States; On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical

Dental

Vision

Basic Life

Health Saving Account

401K

Three weeks PTO/Sick

11 Paid Holidays

Pre-Approved Online Training

Job summary

Node. Digital is seeking a Cyber Incident Manager to support a critical government mission in Arlington, VA. The role requires an active TS/SCI clearance and U.S.

citizenship, with responsibilities spanning incident correlation, defense-in-depth recommendations, and CND triage across enterprise networks. Responsibilities include investigating incidents, coordinating mitigation steps, and documenting outcomes.

Qualifications

• U.S. citizenship required.
• Active TS/SCI clearance required.
• Must obtain DHS suitability.
• 5+ years in cyber incident management or cybersecurity operations.
• Knowledge of incident response methodologies.
• Familiarity with NIST 800-62 and FISMA reporting.
• Knowledge of NCCIC National Cyber Incident Scoring System.
• Knowledge of attack stages and vulnerability types.
• Knowledge of system administration and OS hardening.
• Understanding of threat environments from script kiddies to nation-state.

Responsibilities

• Correlate incident data to identify trends and patterns.
• Recommend defense in depth principles and practices.
• Perform CND incident triage to determine scope, urgency, and impact.
• Research and compile known resolution steps for mitigation.
• Apply cybersecurity concepts to detect and defend intrusions.
• Monitor external data sources to stay current on threats.
• Identify incident causes and gather background and infection vectors.
• Receive and analyze network alerts and determine possible causes.
• Document CND incidents from detection to final resolution with cross-team coordination.
• Provide support during assigned shifts.

Skills

US Citizenship

Active TS/SCI

DHS Suitability

5+ years experience

Incident response

NIST 800-62 knowledge

FISMA knowledge

NCCIC scoring

Attack lifecycle

Vulnerability types

System hardening

Threat environments

Education

BS in Cybersecurity

HS Diploma + 7-9 yrs exp

Tools

Job description

Node. Digital is seeking a Cyber Incident Manager to support a critical government mission in Arlington, VA. The role requires an active TS/SCI clearance and U.S.

citizenship, with responsibilities spanning incident correlation, defense-in-depth recommendations, and CND triage across enterprise networks. Responsibilities include investigating incidents, coordinating mitigation steps, and documenting outcomes.