Cyber Incident Response Analyst — Weekend Day Shift

Nightwing; Arlington, Northern (VA, KY); Hybrid; USD 77,000 - 163,000; Full time

Benefits offered by this job

Medical, Vision and Dental Insurance

401k plan

PTO Holidays

Job summary

Nightwing is seeking an Incident Management Analyst for the weekend day shift in Arlington, VA. The role supports on-site incident response for government customers, investigating breaches, and developing mitigation plans to restore services.

You will work with a team to track incidents from detection to resolution, triage IOCs, and coordinate with multiple components to gather background information. A TS/SCI clearance is required or in process.

Qualifications

• U.S. Citizenship required; active TS/SCI clearance preferred.
• BS in related field or 4-6 years cyber incident management experience.
• Experience with incident response methodologies and log analysis.
• Ability to work across physical locations.
• Familiarity with NCCIC scoring system to prioritize triage.

Responsibilities

• Research and apply known resolution steps to mitigate incidents.
• Analyze log data to detect intrusions and determine infection vectors.
• Track incidents from detection through final resolution.
• Coordinate with internal teams to gather information on ongoing incidents.
• Triaging and researching IOCs for weekend day shift.

Skills

US Citizenship

Active TS/SCI clearance

2+ years incident management

Incident response knowledge

NCCIC scoring system knowledge

Attack lifecycle understanding

Log analysis

Cross-location collaboration

Education

BS in incident management / cybersecurity / related field

HS Diploma + 4-6 years experience

Job description

Nightwing is seeking an Incident Management Analyst for the weekend day shift in Arlington, VA. The role supports on-site incident response for government customers, investigating breaches, and developing mitigation plans to restore services.

You will work with a team to track incidents from detection to resolution, triage IOCs, and coordinate with multiple components to gather background information. A TS/SCI clearance is required or in process.