Cyber Threat Hunter - Incident Response & Forensics

Nightwing Intelligence Solutions, LLC; Sterling (VA); On-site; USD 99,000 - 206,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

401k and PTO

Job summary

Nightwing Intelligence Solutions, LLC seeks Cyber Threat Hunters to support the DHS Hunt and Incident Response Team (HIRT). You will correlate forensic findings, document system states, and perform triage to determine scope and impact.

You will coordinate with government staff to validate alerts and produce forensic write-ups. Ideal candidates have TS/SCI clearance, direct cyber defense experience, and strong proficiency with Linux/Unix and Windows, plus tools like CrowdStrike, Sleuth Kit, and

Qualifications

• U.S. Citizenship required.
• Active TS/SCI clearance.
• Ability to obtain DHS EOD suitability.
• 2+ years of direct cyber defense analysis experience.
• Ability to document forensic findings and write reports.
• Proficiency with Linux/Unix and Windows.
• Experience with incident handling methodologies.

Responsibilities

• Correlate forensic findings to network events to build intrusion narratives.
• Document system state information prior to imaging as required.
• Perform forensic triage to determine scope, urgency, and impact.
• Track and document forensic analysis from start to finish.
• Coordinate with Government staff and customer personnel on alerts and findings.
• Analyze forensic images and contribute to written reports.

Skills

Cyber defense analysis

Forensic analysis

Network traffic analysis

Collaboration across locations

Proactive problem solving

Education

BS Computer Science or related

HS Diploma + 5 years experience

Tools

CrowdStrike

Sleuth Kit/Autopsy

Wireshark

Splunk

Volatility

Job description

Nightwing Intelligence Solutions, LLC seeks Cyber Threat Hunters to support the DHS Hunt and Incident Response Team (HIRT). You will correlate forensic findings, document system states, and perform triage to determine scope and impact.

You will coordinate with government staff to validate alerts and produce forensic write-ups. Ideal candidates have TS/SCI clearance, direct cyber defense experience, and strong proficiency with Linux/Unix and Windows, plus tools like CrowdStrike, Sleuth Kit, and