Senior Cyber Threat Triage Lead (TS/SCI)

RiseMe; Sterling (VA); On-site; USD 122,000 - 253,000; Full time

Job summary

Nightwing is seeking a JCDC TFAN Lead to oversee the operational execution of the initial threat triage function, guiding a team of analysts responsible for rapid assessment, prioritization, and routing of cyber threat intel and incident reports. The role requires 10+ years in cybersecurity operations or threat intelligence, 3+ years in supervisory roles, and active clearance.

You will coordinate with federal agencies and interagency partners to ensure fast, secure threat response across

Qualifications

• US citizenship required.
• Active TS/SCI clearance required.
• Must be able to obtain DHS suitability.
• 10+ years of experience in cybersecurity operations, threat intelligence, or SOC environments.
• 3+ years in a supervisory or team lead capacity.
• Deep understanding of cyber threat landscape, attack vectors, and TTPs.
• Proven experience coordinating with federal agencies and interagency working groups.
• Strong knowledge of incident response frameworks (NIST, SANS) and threat intelligence platforms.
• Experience with MITRE ATT&CK framework and structured analytic techniques.
• Excellent written and verbal communication skills with ability to brief senior leadership.
• Must be able to work collaboratively across physical locations.

Responsibilities

• Lead and manage a team of 10-15 cyber triage analysts, ensuring coverage and operational readiness.
• Establish and maintain SOPs for ticket intake, triage, and escalation processes.
• Coordinate with CISA divisions, FBI, NSA, and other interagency partners for information sharing and threat response.
• Oversee quality assurance of triage assessments and analyst recommendations.
• Conduct daily operational briefings and provide situational awareness to JCDC leadership.
• Manage team training programs and professional development initiatives.
• Serve as escalation point for complex or sensitive threat intelligence.
• Develop and maintain metrics dashboards tracking triage team performance and threat trends.
• Participate in strategic planning for JCDC triage capability enhancement.
• Foster relationships with ISACs and private sector partners.

Skills

US Citizenship

TS/SCI clearance

DHS Suitability

Cybersecurity operations

Threat intelligence

SOC environments

Supervisory experience

Leadership

Cyber threat TTPs

Interagency coordination

NIST/SANS frameworks

MITRE ATT&CK

Structured analytics

Written/verbal communication

Cross-location collaboration

Education

Bachelor’s degree in CS/Cybersecurity/Engineering

Master’s degree preferred

Job description

Nightwing is seeking a JCDC TFAN Lead to oversee the operational execution of the initial threat triage function, guiding a team of analysts responsible for rapid assessment, prioritization, and routing of cyber threat intel and incident reports. The role requires 10+ years in cybersecurity operations or threat intelligence, 3+ years in supervisory roles, and active clearance.

You will coordinate with federal agencies and interagency partners to ensure fast, secure threat response across