Cyber Incident Response Specialist

Nightwing Intelligence Solutions, LLC; Sterling (VA); On-site; USD 77,000 - 163,000; Full time

Benefits offered by this job

Medical, Vision, Dental

401k

PTO & Holidays

Additional insurances

Job summary

Nightwing Intelligence Solutions, LLC seeks an experienced Cyber Incident Response Analyst to support on-site investigations for U.S. government clients in Arlington, VA. You will triage incidents, analyze logs, and coordinate remediation steps with multiple teams.

The role requires active TS/SCI clearance, U.S. citizenship, and 2+ years in cyber incident management. Knowledge of NCCIC scoring, attack life cycles, and DHS suitability is preferred.

Qualifications

• Must have US citizenship and an active TS/SCI clearance.
• BS or higher in Incident Management, Cybersecurity or related field.
• 4–6 years of incident management or cyber security experience for HS diploma path.

Responsibilities

• Research and triage Cyber Network Defense incidents and determine mitigation steps.
• Apply knowledge of attacker TTPs to identify threats and prioritize responses.
• Analyze log data and conduct cursory investigations for IOC indicators.
• Document incidents from detection to resolution and coordinate with teams.

Skills

U.S. Citizenship

TS/SCI clearance

DHS Suitability

2+ years incident management

Incident response

NCCIC scoring knowledge

Attack lifecycle knowledge

System administration basics

CND policies knowledge

Threat environment knowledge

Collaboration across locations

Education

BS in Incident Management/Cybersecurity

HS Diploma + 4-6 years experience

Job description

Nightwing Intelligence Solutions, LLC seeks an experienced Cyber Incident Response Analyst to support on-site investigations for U.S. government clients in Arlington, VA. You will triage incidents, analyze logs, and coordinate remediation steps with multiple teams.

The role requires active TS/SCI clearance, U.S. citizenship, and 2+ years in cyber incident management. Knowledge of NCCIC scoring, attack life cycles, and DHS suitability is preferred.