Cyber Triage Analyst - Threat Intel & SOC

Nightwing; Arlington (VA); On-site; USD 77,000 - 163,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401k plan

Paid time off

Holidays

Job summary

Nightwing is seeking a JCDC Cyber Triage Analyst to perform initial triage and analysis of cyber threat reports, IOCs, and incident tickets. You will correlate evidence, determine severity, and provide actionable recommendations for escalation to government and interagency teams.

Role requires U.S. citizenship and an active TS/SCI eligibility with DHS suitability. Expect collaboration across locations and ongoing development of triage playbooks within the ESS program.

Qualifications

• U.S. Citizenship is required.
• Active Top Secret with SCI Eligibility is required.
• Must be able to obtain DHS Suitability.
• 3–5 years of progressive experience in threat intelligence, SOC operations, or cyber incident response.
• Experience analyzing IOCs, incident tickets, and threat reports.

Responsibilities

• Perform initial triage and assessment of incoming cyber threat tickets, incident reports, and IOC submissions.
• Analyze IP addresses, domain names, file hashes, network traffic patterns, and malware artifacts.
• Determine threat severity, credibility, and potential impact to critical infrastructure sectors.
• Enrich IOCs using threat intelligence platforms and OSINT resources.
• Prepare triage reports with actionable recommendations for escalation or follow-up actions.
• Route tickets to appropriate JCDC teams, CISA divisions, or interagency partners based on findings.
• Maintain documentation in ticketing systems and knowledge management platforms.
• Participate in shift handoffs and contribute to daily operational briefings.

Skills

U.S. Citizenship

Active TS/SCI

DHS Suitability

3–5 years threat intel

SOC operations

Tools

SIEM platforms

TIP threat intel platforms

Ticketing systems

Job description

Nightwing is seeking a JCDC Cyber Triage Analyst to perform initial triage and analysis of cyber threat reports, IOCs, and incident tickets. You will correlate evidence, determine severity, and provide actionable recommendations for escalation to government and interagency teams.

Role requires U.S. citizenship and an active TS/SCI eligibility with DHS suitability. Expect collaboration across locations and ongoing development of triage playbooks within the ESS program.