Senior Onsite Cyber Network Forensics Analyst

Nightwing; Sterling (VA); On-site; USD 120,000 - 170,000; Full time

Job summary

Nightwing is seeking a Network Forensics Analyst to support a U.S. Government customer with on-site incident response.

The role requires active TS/SCI clearance and 8+ years of network investigations experience, including proficiency with TCP/IP, network forensics, and SIEM tools. You will work on-site in Arlington, VA, coordinating with government leads and client teams to characterize breaches and develop mitigations.

Qualifications

• Active TS/SCI clearance required.
• 8+ years of directly relevant experience in network investigations.
• In-depth knowledge of Computer Network Defense policies and procedures.
• Strong understanding of TCP/IP and common network protocols.

Responsibilities

• Assist Government lead in coordinating incident response investigations on site.
• Interface with the customer while on site.
• Determine actions in response to anomalous network activity.
• Assess topology and device configurations to identify security concerns.
• Contribute to writing and publishing CND guidance and incident reports.
• Collect network intrusion artifacts (PCAPs, domains, URI, certificates) for mitigation.
• Analyze malicious network activity to identify exploitation methods and effects.
• Collect device integrity data and analyze signs of tampering or compromise.
• Support on-site CND incident handling tasks and threat analysis.

Skills

TS/SCI clearance

CND knowledge

TCP/IP protocols

MITRE ATT&CK

Splunk

Network forensics

On-site collaboration

WiFi networking

Education

BS in Computer Science / Cyber Security / Computer Engineering

HS Diploma + 10+ years experience

Tools

Wireshark

PCAP analysis

SIEMs

Job description

Nightwing is seeking a Network Forensics Analyst to support a U.S. Government customer with on-site incident response.

The role requires active TS/SCI clearance and 8+ years of network investigations experience, including proficiency with TCP/IP, network forensics, and SIEM tools. You will work on-site in Arlington, VA, coordinating with government leads and client teams to characterize breaches and develop mitigations.