Lead Cyber Network Forensic Analyst

Nightwing; Arlington (VA); On-site; USD 122,000 - 253,000; Full time

Benefits offered by this job

401k plan

Medical, vision and dental insurance

Job summary

Nightwing in Arlington, VA is seeking a Cyber Network Forensic Analyst to support on-site incident response for a U.S. Government customer. You will assist investigations, coordinate with government teams, and help develop mitigation strategies.

Ideal candidates have 8+ years of network investigations, deep CND knowledge, and the ability to analyze traffic and artifacts to guide remediation. This role requires on-site presence in Arlington, VA and an active TS/SCI clearance.

Qualifications

• U.S. Citizenship required; active TS/SCI clearance preferred.
• 8+ years of hands-on network investigations experience.
• Strong knowledge of CND policies, TCP/IP and common protocols.

Responsibilities

• Assist the Government lead in coordinating incident response investigations.
• Interface with the customer on site and determine appropriate courses of action.
• Assess network topology and device configurations to identify security concerns and provide best-practice recommendations.
• Assist with writing and publishing CND guidance and reports on incident findings.

Skills

U.S. Citizenship

Active TS/SCI clearance

8+ years in network investigations

CND knowledge

TCP/IP knowledge

SIEM experience

MITRE ATT&CK

Network topology understanding

Team collaboration

Education

BS in Computer Science / Cyber Security / Computer Engineering or related

HS Diploma + 10+ years network investigations

Tools

Wireshark

Splunk

Job description

Nightwing in Arlington, VA is seeking a Cyber Network Forensic Analyst to support on-site incident response for a U.S. Government customer. You will assist investigations, coordinate with government teams, and help develop mitigation strategies.

Ideal candidates have 8+ years of network investigations, deep CND knowledge, and the ability to analyze traffic and artifacts to guide remediation. This role requires on-site presence in Arlington, VA and an active TS/SCI clearance.