Cyber Threat Hunter & Incident Response Analyst

Nightwing; Virginia; On-site; USD 99,000 - 206,000; Full time

Benefits offered by this job

Medical Insurance

Vision Insurance

Dental Insurance

401k

Paid Time Off

Holidays

Job summary

Nightwing seeks Cyber Threat Hunters to support the DHS Hunt and Incident Response Team (HIRT) at the Arlington, VA site. You will lead forensic analysis, correlate network events, and document investigations to help assess breach severity and drive incident resolution.

Role requires active TS/SCI clearance, strong DFIR expertise, and collaboration with government and enterprise teams. Nightwing offers a comprehensive benefits package and highly competitive salary aligned with experience.

Qualifications

• U.S. Citizenship required for access to sensitive information.
• Active TS/SCI clearance with ability to obtain EOD suitability.
• Minimum 5+ years of direct cyber defense analysis experience.
• Experience creating forensically sound duplicates of evidence and writing investigations.
• Proficiency with Linux/Unix and Windows operating systems.
• Experience with modern cyber defense tools and incident response methodologies.

Responsibilities

• Correlate forensic findings to network events and draft intrusion narratives.
• Document system state information prior to imaging and during investigations.
• Triage incidents to determine scope, urgency, and impact.
• Track forensic analyses from start to resolution and write reports.
• Coordinate with Government staff and customer personnel to validate findings.
• Analyze forensic images and contribute to written forensic write-ups.
• Publish CND guidance and reports; analyze network traffic for anomalies.
• Validate alerts with enterprise cyber defense staff and escalate as needed.
• Document incidents with history, status, and potential impact for action.
• Perform event correlation to assess attack effectiveness and indicators.

Skills

U.S. Citizenship

Active TS/SCI clearance

DHS EOD Suitability

Cyber defense analysis

Linux/Unix proficiency

Windows proficiency

EDR tools: CrowdStrike

EDR tools: SentinelOne

EDR tools: Cortex

EDR tools: MS MDE

EDR tools: Trellix

Education

BS Computer Science, Cyber Security, Computer Engineering, or related degree

HS Diploma with 7-9 years of investigations experience

Tools

EnCase

FTK

X-Ways

Sleuth Kit/Autopsy

SIFT

Volatility

KAPE

WireShark

Splunk

Elastic

Job description

Nightwing seeks Cyber Threat Hunters to support the DHS Hunt and Incident Response Team (HIRT) at the Arlington, VA site. You will lead forensic analysis, correlate network events, and document investigations to help assess breach severity and drive incident resolution.

Role requires active TS/SCI clearance, strong DFIR expertise, and collaboration with government and enterprise teams. Nightwing offers a comprehensive benefits package and highly competitive salary aligned with experience.