Cyber Incident Manager (TS/SCI) - IR Lead

Node.Digital; Arlington (VA); On-site; USD 120,000 - 190,000; Full time

Benefits offered by this job

Medical

Dental

Vision

401K

PTO/Sick leave

11 Paid Holidays

Pre-Approved Online Training

Job summary

Node.Digital is seeking a Cyber Incident Manager to support onsite incident response for a U.S. Government customer. The role requires active TS/SCI clearance and at least 5 years in cyber incident management, with expertise in NIST guidelines, CND, and defense-in-depth strategies.

Responsibilities include correlating incident data, triaging threats, researching resolution steps, and coordinating across teams to mitigate breaches while providing shift-based support on critical infrastructure.

Qualifications

• Active TS/SCI clearance required.
• 5+ years of cyber incident management experience.
• Familiarity with NIST 800-62 and FISMA reporting.
• Experience with incident response methodologies.
• Knowledge of NCCIC Cyber Incident Scoring System.

Responsibilities

• Correlate incident data to identify trends.
• Recommend defense in depth principles and practices.
• Perform CND incident triage to determine scope, urgency, and impact.
• Research and apply known resolution steps for CND incidents.
• Apply cybersecurity concepts to detect and defend intrusions.
• Monitor external data sources to track threat conditions.
• Identify incident causes and gather background for infection vectors.
• Receive and analyze network alerts to determine causes.
• Track incidents from detection to final resolution and coordinate with teams.
• Provide support during assigned shifts.

Skills

Incident management

Cybersecurity operations

NIST 800-62 familiarity

Defense in depth

CND incident triage

Education

Bachelor's degree in Cybersecurity or related field

HS Diploma with 7-9 years cyber security experience

Tools

NCCIC Incident Scoring System

CND policies and regulations

Job description

Node.Digital is seeking a Cyber Incident Manager to support onsite incident response for a U.S. Government customer. The role requires active TS/SCI clearance and at least 5 years in cyber incident management, with expertise in NIST guidelines, CND, and defense-in-depth strategies.

Responsibilities include correlating incident data, triaging threats, researching resolution steps, and coordinating across teams to mitigate breaches while providing shift-based support on critical infrastructure.