Senior Cyber Network Forensic Analyst - Onsite Incident Response

RiseMe; Sterling (VA); On-site; USD 122,000 - 253,000; Full time

Benefits offered by this job

Medical, Vision & Dental insurance

401(k)

Paid Time Off + Holidays

Referral program

Job summary

Nightwing is seeking a Cyber Network Forensic Analyst to support a U.S. Government customer with on-site incident response and rapid investigations. You will coordinate with government leads, analyze network activity, collect artifacts, and publish actionable guidance to secure critical assets.

The role requires U.S. citizenship, TS/SCI eligibility, and 8+ years of network investigation experience. Work location is on-site in Arlington, VA with a strong emphasis on collaboration across locations.

Qualifications

• U.S. Citizenship and an active security clearance or eligibility is required.
• Minimum 8 years of direct experience in network investigations and incident response.
• Deep knowledge of computer network defense policies, procedures, and regulations.
• Strong understanding of TCP/IP and common network protocols.
• Experience with network topology assessment and remediation guidance.

Responsibilities

• Coordinate on-site incident response investigations with Government teams.
• Interface with customer on site and determine actions in response to anomalous activity.
• Assess network topology and device configurations for security risks and advise on best practices.
• Produce and publish CND guidance and incident findings to stakeholders.
• Collect and analyze network artifacts (PCAP, domains, URIs, certs) to enable mitigation.
• Analyze malicious traffic and identify exploitation methods and impacts.
• Ensure data integrity during investigations and tracking of evidence.
• Support real-time CND incident handling and on-site remediation activities.

Skills

U.S. Citizenship

TS/SCI Eligibility

DHS Suitability

8+ years network investigations

CND policies & regulations

TCP/IP protocols

MITRE ATT&CK

Splunk experience

Network security architectures

Team collaboration

Education

BS in CS/CS Security/CE

Tools

Splunk

Wireshark

PCAP analysis

Job description

Nightwing is seeking a Cyber Network Forensic Analyst to support a U.S. Government customer with on-site incident response and rapid investigations. You will coordinate with government leads, analyze network activity, collect artifacts, and publish actionable guidance to secure critical assets.

The role requires U.S. citizenship, TS/SCI eligibility, and 8+ years of network investigation experience. Work location is on-site in Arlington, VA with a strong emphasis on collaboration across locations.