Incident Response & Threat Intelligence Analyst

Nightwing; Sterling (VA); On-site; USD 77,000 - 163,000; Full time

Benefits offered by this job

Medical insurance

Vision insurance

Dental insurance

401k

PTO

Holidays

Job summary

Nightwing seeks a skilled threat intel professional to triage cyber threat tickets, analyze IOC data, and coordinate with interagency partners. You will enrich artifacts using OSINT and privileged threat intel platforms, guiding escalation with precise, actionable recommendations.

The role demands collaboration across physical locations, TS clearance with SCI eligibility, and a proactive approach to emerging cyber campaigns within a mission-focused environment.

Qualifications

• 3-5 years of progressive experience in threat intelligence, SOC operations, or cyber incident response.
• Experience with triage of incoming threat tickets and IOC submissions.
• Ability to enrich IOCs using threat intel platforms and OSINT.
• Must have an active TS clearance with SCI eligibility.

Responsibilities

• Perform initial triage and assessment of incoming cyber threat tickets, incident reports, and IOC submissions.
• Analyze technical data including IPs, domains, file hashes, traffic patterns, and malware artifacts.
• Determine threat severity, credibility, and potential impact to critical infrastructure sectors.
• Enrich IOCs using threat intelligence platforms, OSINT, and government resources.
• Prepare concise triage reports with actionable recommendations for escalation or further analysis.
• Route tickets to appropriate teams, or interagency partners based on assessment findings.
• Coordinate with sector analysts and interagency liaisons to gather context.

Skills

Threat intelligence

SOC operations

Cyber incident response

IOC analysis

OSINT

Interagency coordination

Tools

SIEM platforms

Threat intelligence platforms

Ticketing systems

Job description

Nightwing seeks a skilled threat intel professional to triage cyber threat tickets, analyze IOC data, and coordinate with interagency partners. You will enrich artifacts using OSINT and privileged threat intel platforms, guiding escalation with precise, actionable recommendations.

The role demands collaboration across physical locations, TS clearance with SCI eligibility, and a proactive approach to emerging cyber campaigns within a mission-focused environment.