Network Forensics Specialist II - TS/SCI Incident Response

Nightwing Group; Sterling (VA); Hybrid; USD 110,000 - 150,000; Full time

Job summary

Nightwing seeks a Network Forensics Analyst to support a U.S. Government client onsite in Sterling, VA. The role focuses on incident response, evidence collection, and rapid containment of cyber incidents across government networks.

You will work with a government lead and customer teams to determine remediation steps and strengthen defensive posture. The ideal candidate has 5+ years of network investigations, deep knowledge of CND practices, and hands-on experience with real-time threat

Qualifications

• BS in Computer Science, Cyber Security, Computer Engineering, or related field; or HS Diploma with 7-9 years of network investigations experience.
• Active TS/SCI clearance and ability to obtain DHS Suitability.
• 5+ years of directly relevant experience in network investigations.
• Deep knowledge of CND policies, procedures, and regulations.
• Strong knowledge of TCP/IP and common protocols (HTTP/S, DNS, SSH, SMB, NFS, etc.).
• Experience with Splunk or other SIEMs.
• Ability to characterize and analyze network traffic to identify anomalies.

Responsibilities

• Assists government lead in coordinating teams in preliminary incident response investigations.
• Interfaces with the customer on site while on assignment.
• Determines appropriate courses of action in response to identified anomalies.
• Assesses network topology and device configurations for security gaps and best practices.
• Assists with writing and publishing of CND guidance and incident reports.
• Collects network intrusion artifacts (PCAP, domains, URI, certificates) for mitigation.
• Analyzes identified malicious activity to determine exploitation methods and effects.
• Collects device integrity data and checks for tampering or compromise.
• Supports real-time CND incident handling (forensic collections, correlation, threat analysis, remediation).

Skills

U.S. Citizenship

TS/SCI Clearance

5+ years network investigations

CND policies & regulations

TCP/IP knowledge

Wireshark

MITRE ATT&CK

Splunk

Education

BS in CS/Cyber Security/CE

Tools

Wireshark

PCAP analysis tools

Job description

Nightwing seeks a Network Forensics Analyst to support a U.S. Government client onsite in Sterling, VA. The role focuses on incident response, evidence collection, and rapid containment of cyber incidents across government networks.

You will work with a government lead and customer teams to determine remediation steps and strengthen defensive posture. The ideal candidate has 5+ years of network investigations, deep knowledge of CND practices, and hands-on experience with real-time threat