Cyber Incident Response Lead (TS/SCI)

Nightwing; Virginia (MN); On-site; USD 99,000 - 206,000; Full time

Benefits offered by this job

Medical insurance

Vision insurance

Dental insurance

401k plan

PTO

Holidays

Job summary

Nightwing is seeking a Cyber Incident Manager to support a U.S. Government customer by providing onsite incident response, breach analysis, and rapid mitigation across large IT environments in Arlington, VA.

The role emphasizes triage, coordination with security teams, and documented incident handling. The successful candidate will bring 5+ years in incident management, active TS/SCI clearance, and knowledge of NIST and FISMA requirements, with the ability to prioritize threats and explain

Qualifications

• U.S. Citizenship is required.
• Active TS/SCI clearance is required.
• Must be able to obtain DHS Suitability.
• 5+ years of cyber incident management or cybersecurity operations experience.
• Knowledge of incident response methodologies.
• Familiarity with NIST 800-62 and FISMA reporting.
• Ability to prioritize incidents and describe phishing tactics.
• Understanding of general attack stages from recon to exploitation.
• Knowledge of vulnerabilities and attack types.
• Knowledge of basic system administration and OS hardening.
• Knowledge of threat environments (script kiddies to nation-state).
• Knowledge of security threats and attack methods (e.g., XSS, injections).

Responsibilities

• Correlating incident data to identify trends.
• Recommending defense in depth principles and practices.
• Performing Computer Network Defense incident triage to determine scope, urgency, and potential impact.
• Researching and compiling known resolution steps or workarounds to enable mitigation of potential incidents.
• Applying cybersecurity concepts to detection and defense of intrusions and conduct cursory log analysis.
• Monitoring external data sources to maintain currency of CND threat condition and determine issues.
• Identifying the cause of an incident and learning background/infection vectors.
• Receiving and analyzing network alerts from various sources and determine causes.
• Tracking and documenting CND incidents from detection through resolution with other teams.
• Limited candidates may be hired for shift work; triaging and researching incidents for IOCs.

Skills

U.S. Citizenship

Active TS/SCI clearance

DHS Suitability eligibility

5+ years cyber incident management

Incident response methodologies

NIST 800-62 familiarity

FISMA knowledge

Prioritize incidents & phishing

Attack lifecycle understanding

Vulnerability & threat knowledge

System administration basics

Threat environments knowledge

Security threats & attacks knowledge

Education

BS in Incident Management / Cybersecurity or related

HS Diploma + 7-9 incident management experience

Job description

Nightwing is seeking a Cyber Incident Manager to support a U.S. Government customer by providing onsite incident response, breach analysis, and rapid mitigation across large IT environments in Arlington, VA.

The role emphasizes triage, coordination with security teams, and documented incident handling. The successful candidate will bring 5+ years in incident management, active TS/SCI clearance, and knowledge of NIST and FISMA requirements, with the ability to prioritize threats and explain