Cyber Incident Response Lead

Nightwing; Arlington (VA); On-site; USD 99,000 - 206,000; Full time

Benefits offered by this job

Medical, Vision, Dental Insurance

401k plan

PTO/Holidays

Job summary

Nightwing is seeking a Cyber Incident Manager to support a U.S. Government customer with onsite incident response, investigation, and restoration of services.

Responsibilities include correlating incident data, triaging incidents, and researching mitigation steps to enhance defense in depth across enterprise networks. Qualified candidates will have 5+ years in cyber incident management, an active TS/SCI clearance, and familiarity with NIST standards and incident reporting practices.

Qualifications

• U.S. Citizenship required.
• Active TS/SCI clearance required.
• Experience in cyber incident management or cybersecurity operations (5+ years).
• Familiarity with incident response methodologies and standards (NIST 800-62, FISMA).
• Ability to triage incidents, investigate phishing tactics, and describe incident reporting gaps.

Responsibilities

• Correlate incident data to identify trends.
• Recommend defense in depth principles.
• Perform CND incident triage to assess scope and impact.
• Research known mitigation steps for CND incidents.
• Apply cybersecurity concepts to detect intrusions across networks.

Skills

U.S. Citizenship

Active TS/SCI clearance

DHS Suitability

5+ years incident management

Incident response methodologies

NIST 800-53/62 & FISMA familiarity

Prioritize incidents & phishing

Attack stages knowledge

Vulnerability & attacks knowledge

Education

BS Incident Management / Cybersecurity related

HS Diploma with 7-9 incident management/cybersecurity experience

Job description

Nightwing is seeking a Cyber Incident Manager to support a U.S. Government customer with onsite incident response, investigation, and restoration of services.

Responsibilities include correlating incident data, triaging incidents, and researching mitigation steps to enhance defense in depth across enterprise networks. Qualified candidates will have 5+ years in cyber incident management, an active TS/SCI clearance, and familiarity with NIST standards and incident reporting practices.