Cyber Incident Response Lead

Nightwing; Arlington (TX); On-site; USD 110,000 - 160,000; Full time

Job summary

Nightwing is seeking a Cyber Action Officer to support a U.S. Government client with onsite incident response capabilities in Arlington, TX. You will manage cyber incidents, coordinate with stakeholders, and deliver timely case summaries for leadership.

Applicants should have 5+ years in cyber incident management, an active TS/SCI clearance, and the ability to prioritize threats using established frameworks. This on-site role supports critical national security missions.

Qualifications

• 5+ years of directly relevant experience in cyber incident management or cybersecurity operations.
• Knowledge of incident response, threat hunting, and handling methodologies.
• Excellent oral and written communication skills.

Responsibilities

• Manage cyber incidents through the incident response lifecycle.
• Create and maintain routine reporting of cyber incidents in official systems of record, to include case management systems and ticketing.
• Coordinate with internal and external customers, partners, and stakeholders.
• Ingest, validate, and evaluate information to determine optimal courses of action, to include providing response support to requesting entities.
• Update and track cases and tickets with accuracy, timeliness, reliability, and consistency.
• Draft summaries of ongoing operations and present to leadership.
• Maintain knowledge objects in system of record consistently and professionally.
• Threat and vulnerability management utilizing MITRE ATT&CK framework.
• Knowledgeable of network security monitoring, security operations analysis, and cybersecurity policies.

Skills

U.S. Citizenship

Active TS/SCI clearance

DHS Suitability

Incident response

Threat hunting

Stakeholder coordination

MITRE ATT&CK

Network security monitoring

Oral and written communication

Education

BS in Incident Management/Operations/Cybersecurity

HS Diploma + 7-9 cyber security experience

Job description

Nightwing is seeking a Cyber Action Officer to support a U.S. Government client with onsite incident response capabilities in Arlington, TX. You will manage cyber incidents, coordinate with stakeholders, and deliver timely case summaries for leadership.

Applicants should have 5+ years in cyber incident management, an active TS/SCI clearance, and the ability to prioritize threats using established frameworks. This on-site role supports critical national security missions.