Cyber Incident Response Lead (TS/SCI) - Onsite

Nightwing; Arlington, Northern (VA, KY); Hybrid; USD 99,000 - 206,000; Full time

Benefits offered by this job

Medical insurance

Vision insurance

Dental insurance

401k plan

Paid time off

Holidays

Additional insurances

Job summary

Nightwing in Arlington, VA seeks a Cyber Incident Manager to support a U.S. Government customer for onsite incident response and rapid recovery. You will correlate incidents, identify trends, and coordinate with teams to mitigate breaches and restore services.

The role requires U.S. citizenship and an active TS/SCI clearance, with 5+ years in incident management or cybersecurity operations. Competitive compensation and full benefits are provided.

Qualifications

• U.S. Citizenship required.
• Active TS/SCI clearance required.
• 5+ years of directly relevant experience in cyber incident management or cybersecurity operations.
• Knowledge of incident response methodologies and handling.
• Familiarity with NIST 800-62 and FISMA reporting standards.
• Ability to prioritize incidents and describe attack tactics.
• Knowledge of common vulnerability and attack methods.

Responsibilities

• Correlate incident data to identify trends in reported incidents.
• Recommend defense in depth principles and triage incidents.
• Perform CND incident triage to determine scope, urgency, and impact.
• Research resolution steps to mitigate incidents within the enterprise.
• Apply cybersecurity concepts to detection and defense of intrusions.
• Monitor external data sources for threats affecting the enterprise.
• Track and document CND incidents from detection to final resolution.

Job description

Nightwing in Arlington, VA seeks a Cyber Incident Manager to support a U.S. Government customer for onsite incident response and rapid recovery. You will correlate incidents, identify trends, and coordinate with teams to mitigate breaches and restore services.

The role requires U.S. citizenship and an active TS/SCI clearance, with 5+ years in incident management or cybersecurity operations. Competitive compensation and full benefits are provided.