Cyber Threat & Incident Response Analyst

Nightwing; Arlington (VA); On-site; USD 77,000 - 163,000; Full time

Job summary

Nightwing is seeking a Cyber Threat Analyst to support a U.S. Government client in onsite incident response. You will investigate and resolve breaches, determine containment actions, and advise on mitigation strategies.

Responsibilities include researching mitigation steps, analyzing log data, and coordinating with teams to track incidents through to resolution, while maintaining Cyber Defense best practices and compliance.

Qualifications

• U.S. Citizenship required.
• Active TS/SCI clearance required; DHS suitability may be needed.
• 2+ years in cyber incident management or cybersecurity operations.
• Knowledge of incident response methodologies and prioritization using NCCIC scoring system.
• Understanding of common attack life cycles and vulnerability classification.
• Knowledge of basic system administration and security hardening.
• Familiarity with CND policies, procedures, and regulations.
• Ability to collaborate across physical locations.

Responsibilities

• Research known resolution steps or workarounds to mitigate potential incidents.
• Identify and validate threats using knowledge of threat actors and TTPs.
• Analyze log data to detect intrusions and support defense
• Document incident details from detection to resolution.
• Coordinate information with cross-functional teams during incidents.
• Triaging incidents for IOCs and escalating to senior analysts as needed.

Skills

U.S. Citizenship

Active TS/SCI clearance

DHS Suitability

2+ years cyber incident management

Incident response methodologies

NCCIC scoring system knowledge

Cybersecurity operations knowledge

Attack lifecycle knowledge

System administration basics

CND policies and regulations

Education

BS in Incident Management/Operations/Cybersecurity or related

HS Diploma + 4–6 years relevant experience

Job description

Nightwing is seeking a Cyber Threat Analyst to support a U.S. Government client in onsite incident response. You will investigate and resolve breaches, determine containment actions, and advise on mitigation strategies.

Responsibilities include researching mitigation steps, analyzing log data, and coordinating with teams to track incidents through to resolution, while maintaining Cyber Defense best practices and compliance.