Cyber Threat Hunter II: Incident Response & Forensics

Nightwing; Sterling (VA); On-site; USD 99,000 - 206,000; Full time

Benefits offered by this job

Medical insurance

Vision insurance

Dental insurance

401k

PTO

Holidays

Job summary

Nightwing seeks Cyber Threat Hunters to support DHS Hunt and Incident Response Team (HIRT) missions. You’ll perform forensic analysis, incident triage, and intrusion tracing across host, cloud, and network environments to produce authoritative reports for government customers.

Required: U.S. citizenship, TS/SCI clearance, and hands-on cyber defense experience. Arlington, VA area, with both remote and on-site collaboration as needed.

Qualifications

• BS Computer Science, Cyber Security, Computer Engineering, or related degree; or HS Diploma & 5 years of investigations experience.
• GCFE, GCFA, GCLD, GCPS, GCPN, GWEB, GIRD, GREM, GNFA, GCIH, GCIA, GSEC,
• Kubernetes Security Specialist, Microsoft 365 Certifications, Microsoft Azure Certifications, AWS Certifications, SANS Cloud Courses (SEC541, SEC584, SEC588) and Certifications GSEC (SANS401)

Responsibilities

• Correlate forensic findings to network events in support of developing an intrusion narrative
• Collect and document system state information (e.g. running processes, network connections) prior to imaging, as required
• Perform forensic triage of an incident to include determining scope, urgency and potential impact
• Track and document forensic analysis from initial participation through resolution
• Coordinate with Government staff and customer personnel to validate/investigate alerts or additional preliminary findings
• Conduct analysis of forensic images, and available evidence in support of forensic write-ups for inclusion in reports and written products
• Assist to document and publishing Computer Network Defense (CND) guidance and reports pertaining to incident findings

Skills

U.S. Citizenship

Active TS/SCI clearance

DHS EOD suitability

Forensic analysis

Cyber defense tools

Linux/Unix

Windows

Incident response

Collaborative teamwork

Education

Bachelor's degree in Computer Science

5 years of investigations experience

Certifications (GCFE, GCFA, GREM etc.)

Tools

CrowdStrike

SentinelOne

Cortex

MS MDE

Trellix

EnCase

FTK

X-Ways

Sleuth Kit/Autopsy

KAPE

Wireshark

Splunk

Job description

Nightwing seeks Cyber Threat Hunters to support DHS Hunt and Incident Response Team (HIRT) missions. You’ll perform forensic analysis, incident triage, and intrusion tracing across host, cloud, and network environments to produce authoritative reports for government customers.

Required: U.S. citizenship, TS/SCI clearance, and hands-on cyber defense experience. Arlington, VA area, with both remote and on-site collaboration as needed.