Senior Cyber Network Forensics Analyst - Onsite Response

Nightwing; Virginia (MN); On-site; USD 99,000 - 206,000; Full time

Benefits offered by this job

Medical insurance

Vision insurance

Dental insurance

401k plan

Paid time off

Job summary

Nightwing in Arlington, VA seeks a Network Forensics Analyst to support a U.S. Government client with on-site incident response, investigating breaches, assessing severity, and helping restore services.

The role requires active TS/SCI clearance, 8+ years in network investigations, deep CND, TCP/IP knowledge, and hands-on SIEM/PCAP analysis skills. Join a mission-driven team delivering critical cyber defense capabilities.

Qualifications

• 8+ years of direct experience in network investigations.
• In-depth knowledge of CND policies, procedures and regulations.
• Strong understanding of TCP/IP and common network protocols.
• Ability to analyze network traffic and identify anomalies.

Responsibilities

• Coordinate with the Government lead in preliminary incident response investigations.
• Interface with the customer on site and coordinate teams across locations.
• Determine actions in response to anomalous network activity discovered.
• Assess topology and device configurations for security concerns and best practices.
• Publish CND guidance and incident findings to appropriate constituencies.
• Collect network intrusion artifacts and enable mitigation of incidents.
• Analyze malicious activity to identify exploitation methods and impacts.
• Support real-time CND incident handling and remediation tasks.

Skills

U.S. Citizenship

Active TS/SCI clearance

8+ years network investigations

CND policies knowledge

TCP/IP protocols knowledge

HTTP/S DNS SSH

WiFi networking

Network topologies

Splunk

ATT&CK knowledge

Education

BS in Computer Science/Cyber Security/CS Engineering

Tools

Splunk SIEM

Wireshark

Job description

Nightwing in Arlington, VA seeks a Network Forensics Analyst to support a U.S. Government client with on-site incident response, investigating breaches, assessing severity, and helping restore services.

The role requires active TS/SCI clearance, 8+ years in network investigations, deep CND, TCP/IP knowledge, and hands-on SIEM/PCAP analysis skills. Join a mission-driven team delivering critical cyber defense capabilities.