Cyber Threat Triage Lead

Nightwing; Arlington (VA); On-site; USD 122,000 - 253,000; Full time

Benefits offered by this job

Medical insurance

Vision insurance

Dental insurance

401k plan

PTO/Holidays

Additional insurances

Job summary

Nightwing is seeking a JCDC TFAN Lead to oversee the triage function, managing a team of analysts responsible for rapid assessment and routing of cyber threat intelligence and incident reports. You will coordinate with interagency partners and critical infrastructure stakeholders to ensure rapid, secure threat response.

The role requires 10+ years in cybersecurity operations with a supervisory background, TS/SCI clearance, and ability to work across multiple locations.

Qualifications

• 10+ years in cybersecurity operations, threat intelligence or SOC environments.
• 3+ years in a supervisory or team lead capacity.
• Active TS/SCI clearance and ability to obtain DHS suitability.

Responsibilities

• Lead and manage a team of 10-15 cyber triage analysts and ensure coverage.
• Establish SOPs for ticket intake, triage, and escalation processes.
• Coordinate with CISA, FBI, NSA and interagency partners for threat response.
• Oversee QA of triage assessments and analyst recommendations.
• Conduct daily briefings and provide situational awareness to leadership.
• Develop metrics dashboards and strategic planning for triage capability.
• Foster ISAC relationships and private sector partnerships.

Skills

Cyber operations

Threat intelligence

Supervisory leadership

Interagency coordination

Incident response

NIST/SANS frameworks

MITRE ATT&CK

Communication to leadership

Cyber threat analytics

Team training

Education

CISSP or similar

Tools

Threat intelligence platforms

Security best practices

Job description

Nightwing is seeking a JCDC TFAN Lead to oversee the triage function, managing a team of analysts responsible for rapid assessment and routing of cyber threat intelligence and incident reports. You will coordinate with interagency partners and critical infrastructure stakeholders to ensure rapid, secure threat response.

The role requires 10+ years in cybersecurity operations with a supervisory background, TS/SCI clearance, and ability to work across multiple locations.