Cyber Threat Triage Analyst

Nightwing; Sterling (VA); On-site; USD 77,000 - 163,000; Full time

Benefits offered by this job

Medical, Vision and Dental insurance

401k

Paid Time Off

Holidays

Job summary

Nightwing is seeking a JCDC Cyber Triage Analyst to serve as a frontline defender in the nation's cyber defense posture. You will perform initial analysis of threat reports, IOC submissions, and incident notifications, researching activity and delivering defensible conclusions with recommended follow-up actions.

The role requires active Top Secret with SCI eligibility, U.S. citizenship, and 3–5 years in threat intelligence or SOC operations.

Qualifications

• Active TS with SCI eligibility is required.
• 3–5 years of progressive threat intelligence, SOC operations, or cyber incident response experience.
• Ability to triage and assess incoming threat tickets and IOC submissions.
• Experience enriching IOCs using threat intel platforms and OSINT.
• Ability to coordinate with interagency partners and government teams.

Responsibilities

• Perform initial triage and assessment of threat tickets, incident reports, and IOC submissions.
• Analyze IPs, domains, file hashes, network traffic, and malware artifacts.
• Determine threat severity, credibility, and potential impact to critical infrastructure.
• Enrich IOCs using threat intel platforms, OSINT, and government resources.
• Prepare concise triage reports with actionable escalation recommendations.
• Route tickets to JCDC teams, CISA divisions, or interagency partners.
• Coordinate with sector analysts and interagency liaisons for context.
• Maintain accurate documentation in ticketing systems and knowledge bases.
• Participate in shift handoffs and daily operational briefings.
• Contribute to triage playbooks and SOP development.
• Monitor emerging threat campaigns and adversary activity.
• Provide feedback to submitters and partners on ticket status.

Skills

U.S. Citizenship

Top Secret with SCI Eligibility

DHS Suitability

Threat intelligence

SOC/IR experience

Collaborative across locations

Analytical triage

Threat reports & IOC analysis

Shift handoffs & briefings

Documentation in ticketing systems

Tools

SIEM platforms

Threat intelligence platforms (TIP)

OSINT resources

Ticketing systems

Job description

Nightwing is seeking a JCDC Cyber Triage Analyst to serve as a frontline defender in the nation's cyber defense posture. You will perform initial analysis of threat reports, IOC submissions, and incident notifications, researching activity and delivering defensible conclusions with recommended follow-up actions.

The role requires active Top Secret with SCI eligibility, U.S. citizenship, and 3–5 years in threat intelligence or SOC operations.