Cyber Incident Response Analyst

Nightwing Intelligence Solutions, LLC; Sterling (VA); On-site; USD 77,000 - 163,000; Full time

Benefits offered by this job

Medical, vision and dental insurance

401k plan

PTO and Holidays

Additional insurances

Job summary

Nightwing Intelligence Solutions, LLC is seeking qualified professionals to support onsite incident response for U.S. Government customers in the Sterling, VA area.

You will investigate breaches, determine severity, develop mitigation plans, and help restore services across enterprise IT environments. Responsibilities include researching resolution steps, applying TTP knowledge of threat actors, analyzing logs, and coordinating with internal teams.

Qualifications

• U.S. Citizenship required.
• Active TS/SCI clearance.
• Ability to obtain DHS Suitability.
• 2+ years of directly relevant experience in cyber incident management or cybersecurity operations.
• Knowledge of incident response and handling methodologies.
• Knowledge of the NCCIC National Cyber Incident Scoring System to prioritize triaging of incidents.
• Knowledge of general attack stages and related concepts.
• Ability to recognize and categorize vulnerabilities and attacks.
• Basic system administration and OS hardening knowledge.
• Knowledge of CND policies, procedures, and regulations.
• Knowledge of different operational threat environments (script kiddies to nation-state).
• Knowledge of system and application security threats and attack methods.

Responsibilities

• Research and compile known resolution steps to mitigate potential Cyber Network Defense incidents.
• Apply knowledge of threat actor TTPs to identify and validate threats.
• Apply cybersecurity concepts to detect and defend intrusions and analyze logs.
• Conduct cursory analysis of log data.
• Identify incident causes and gather background information from external entities.
• Track CND incidents from detection to resolution.
• Coordinate information with other organizational components during incidents.
• Shift workers may be assigned and triaged for IOCs and escalation.

Skills

U.S. Citizenship

Active TS/SCI clearance

DHS Suitability

2+ years of cyber incident management

Incident response methodologies

NCCIC National Cyber Incident Scoring

Knowledge of attack stages

Vulnerability identification

System administration basics

CND policies and regulations

Operational threat environments

Security threats and attack methods

Collaborative work across locations

Education

BS in Incident Management/Operations Management/Cybersecurity or related

HS Diploma with 4-6 years of incident management or cybersecurity experience

Job description

Nightwing Intelligence Solutions, LLC is seeking qualified professionals to support onsite incident response for U.S. Government customers in the Sterling, VA area.

You will investigate breaches, determine severity, develop mitigation plans, and help restore services across enterprise IT environments. Responsibilities include researching resolution steps, applying TTP knowledge of threat actors, analyzing logs, and coordinating with internal teams.