Remote Cyber Defense Analyst - Tier 1

Nightwing; Virginia; Hybrid; USD 64,000 - 128,000; Full time

Benefits offered by this job

Medical, Vision and Dental Insurance

401k Plan

Paid Time Off

Job summary

Nightwing is seeking a Cyber Defense Analyst to monitor and triage alerts across VSOC customer environments, applying SOPs and coordinating containment actions. You will document investigations and escalate incidents while communicating clearly with customers and teammates.

You will work with SIEM/XDR tools such as Microsoft Sentinel, EDR capabilities, and case management systems to ensure timely, accurate responses and continuous improvement of SOC readiness.

Qualifications

• 1–2+ years of cybersecurity monitoring in a SOC/NOC or similar.
• Hands-on with a SIEM/XDR for alert monitoring and triage.
• Experience with EDR tools for investigation and containment.
• Experience triaging alerts and escalating incidents.
• Documentation of investigations and case records.
• Experience in a 24x7 shift-based environment.

Responsibilities

• Monitor customer environments and triage security alerts.
• Escalate confirmed or suspected threats with actionable reports.
• Document investigations with timestamps and evidence.
• Execute SOPs for common alert types and containment actions.
• Communicate with customers and handover items between shifts.
• Collaborate with intelligence, PM, and engineering teams.

Skills

SOC monitoring

Alert triage

Incident response

Documentation

Team collaboration

Threat intel

Shift work

Communication

Education

CompTIA Security+

CISSP Associate

Tools

Microsoft Sentinel

EDR tools

Case management system

Job description

Nightwing is seeking a Cyber Defense Analyst to monitor and triage alerts across VSOC customer environments, applying SOPs and coordinating containment actions. You will document investigations and escalate incidents while communicating clearly with customers and teammates.

You will work with SIEM/XDR tools such as Microsoft Sentinel, EDR capabilities, and case management systems to ensure timely, accurate responses and continuous improvement of SOC readiness.