Cyber Threat Triage Analyst (TS/SCI)

Nightwing; Arlington (VA); On-site; USD 77,000 - 163,000; Full time

Benefits offered by this job

Medical, Vision, and Dental Insurance

401k plan

Paid Time Off

Holidays

Additional insurances

Job summary

Nightwing is seeking a JCDC Cyber Triage Analyst to support the nation’s cyber defense by triaging threat tickets, analyzing IOC data, and coordinating with federal and interagency partners. The role requires TS/SCI eligibility, U.S. citizenship, and the ability to work across locations.

Responsibilities include initial triage, enrichment of IOCs with threat intel, and producing actionable reports to guide escalation and response within the ESS-3648 to ESS-3656 program family.

Qualifications

• U.S. Citizenship is required.
• Active Top Secret with SCI Eligibility required.
• DHS Suitability is required.
• 3-5 years of progressive experience in threat intelligence, SOC operations, or cyber incident response.

Responsibilities

• Perform initial triage and assessment of incoming cyber threat tickets, incident reports, and IOC submissions.
• Analyze technical data including IP addresses, domain names, file hashes, network traffic patterns, and malware artifacts.
• Determine threat severity, credibility, and potential impact to critical infrastructure sectors.
• Enrich IOCs using threat intelligence platforms, OSINT, and government-exclusive resources.
• Prepare concise triage reports with actionable recommendations for escalation or further analysis.
• Route tickets to appropriate JCDC teams, CISA divisions, or interagency partners based on assessment findings.
• Coordinate with sector-specific analysts and interagency liaisons to gather additional context.
• Maintain accurate documentation in ticketing systems and knowledge management platforms.
• Participate in shift handoffs and daily operational briefings.
• Support development of triage playbooks and standard operating procedures.
• Monitor emerging threat campaigns and trending adversary activity.
• Provide feedback to submitters and partner organizations on ticket status and outcomes.
• Must be able to work collaboratively across physical locations.

Skills

U.S. Citizenship

Top Secret with SCI Eligibility

DHS Suitability

3-5 years experience in threat intel /

Education

Security+, CySA+, GCIH, GCIA, or similar certifications

Tools

SIEM platforms

Threat intelligence platforms

OSSINT

Job description

Nightwing is seeking a JCDC Cyber Triage Analyst to support the nation’s cyber defense by triaging threat tickets, analyzing IOC data, and coordinating with federal and interagency partners. The role requires TS/SCI eligibility, U.S. citizenship, and the ability to work across locations.

Responsibilities include initial triage, enrichment of IOCs with threat intel, and producing actionable reports to guide escalation and response within the ESS-3648 to ESS-3656 program family.