Cyber Incident Manager | TS/SCI Clearance | IR Lead

Nightwing; Arlington (VA); On-site; USD 99,000 - 206,000; Full time

Benefits offered by this job

Medical insurance

Vision insurance

Dental insurance

401(k) plan

PTO

Holidays

Additional insurances

Job summary

Nightwing is seeking a Cyber Incident Manager to support a U.S. Government mission in Arlington, VA. The role focuses on incident triage, defense-in-depth, and rapid investigation of cyber incidents across enterprise networks.

You will correlate data, research remediation steps, and coordinate with multiple teams to restore services while maintaining compliance with NIST and FISMA guidelines. A TS/SCI clearance is required for this on-site position.

Qualifications

• Requires a BS in Cybersecurity, Incident Management, or related field.
• HS Diploma with 7–9 years in incident management or cyber security.
• Must hold an active TS/SCI clearance and be able to obtain DHS suitability.
• 5+ years of directly relevant experience in cyber incident management or cybersecurity operations.
• Strong knowledge of incident response methodologies and cyber defense concepts.
• Familiarity with NIST SP 800-62 revision and FISMA reporting requirements.
• Ability to prioritize incidents, investigate tactics in phishing campaigns, and assess reporting gaps.
• Understanding of common attack stages from footprint to exfiltration.
• Experience with vulnerability identification and classification.

Responsibilities

• Correlating incident data to identify trends in reported incidents.
• Recommending defense in depth principles and practices (i.e. Defense in Multiple Places, layered defenses).
• Performing Computer Network Defense incident triage to determine scope, urgency, and impact.
• Researching and compiling known resolution steps to mitigate incidents within the enterprise.
• Applying cybersecurity concepts to detect intrusions and analyze logs.
• Monitoring external data sources to maintain currency of CND threat conditions.
• Identifying cause of incidents and gathering background vectors from external entities.
• Receiving and analyzing network alerts to determine possible causes.
• Tracking CND incidents from detection to final resolution and coordinating with teams.
• Limited shift work; triaging IOC indicators and escalating to specialists.

Skills

U.S. Citizenship

Active TS/SCI clearance

DHS suitability

5+ years cyber incident mgmt

Incident response methodologies

NIST 800-62 familiarity

Attack lifecycle knowledge

Vulnerability identification

Education

BS in Cybersecurity/Incident Management/related field

HS Diploma with 7–9 years in cyber security

Certifications: GCIH

Certifications: GCFA

Certifications: GCED

Certifications: CISSP

Job description

Nightwing is seeking a Cyber Incident Manager to support a U.S. Government mission in Arlington, VA. The role focuses on incident triage, defense-in-depth, and rapid investigation of cyber incidents across enterprise networks.

You will correlate data, research remediation steps, and coordinate with multiple teams to restore services while maintaining compliance with NIST and FISMA guidelines. A TS/SCI clearance is required for this on-site position.