(Cyber) Incident Management Analyst - Weekend Night Shift with Security Clearance

Nightwing provides technically advanced full-spectrum cyber, data operations, systems integration and intelligence mission support services to meet our customers' most demanding challenges. Our capabilities include cyber space operations, cyber defense and resiliency, vulnerability research, ubiquitous technical surveillance, data intelligence, lifecycle mission enablement, and software modernization. Nightwing brings disruptive technologies, agility, and competitive offerings to customers in the intelligence community, defense, civil, and commercial markets. Nightwing is supporting a U.S. Government customer to provide support for onsite incident response to civilian Government agencies and critical asset owners who experience cyber‑attacks, providing immediate investigation and resolution. Contract personnel perform investigations to characterize the severity of breaches, develop mitigation plans, and assist with the restoration of services. Nightwing is seeking a Cyber Incident Manager to support this critical customer mission. Responsibilities Correlate incident data to identify specific trends in reported incidents. Recommend defense‑in‑depth principles and practices (e.g., Defense in Multiple Places, layered defenses, security robustness). Perform Computer Network Defense incident triage to determine scope, urgency, and potential impact. Research and compile known resolution steps or workarounds to enable mitigation of potential Computer Network Defense incidents within the enterprise. Apply cybersecurity concepts to detect and defend against intrusions into small and large‑scale IT networks, and conduct cursory analysis of log data. Monitor external data sources to maintain currency of Computer Network Defense threat conditions and determine which security issues may impact the enterprise. Identify the cause of an incident and recognize key elements to inquire from external entities about background and potential infection vector. Receive and analyze network alerts from various sources within the enterprise and determine possible causes. Track and document Computer Network Defense (CND) incidents from initial detection through final resolution, coordinating information with other components of the organization. Schedule shift work and triage incidents for Indicators of Compromise (IOCs), escalating to specialized analysts when necessary (limited candidates may be hired for shift work). Required Skills U.S. Citizenship. Active TS/SCI clearance. Ability to obtain DHS suitability. 5+ years of directly relevant experience in cyber incident management or cybersecurity operations. Knowledge of incident response and handling methodologies. Familiarity with NIST 800‑62 (latest revision) and FISMA standards as they pertain to incident reporting. Ability to prioritize incidents, investigate and describe tactics used in phishing campaigns, and recognize gaps in incident reporting. Knowledge of general attack stages (footprinting and scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks, etc.). Skill in recognizing and categorizing types of vulnerabilities and associated attacks. Basic system administration and operating system hardening techniques. Computer Network Defense policies, procedures, and regulations. Desired Skills Knowledge of different operational threat environments (first generation [script kiddies], second generation [non‑nation‑state sponsored], third generation [nation‑state sponsored]). Knowledge of system and application security threats and attack methods (buffer overflow, mobile code, cross‑site scripting, PL/SQL and injections, race conditions, covert channel, replay, return‑oriented attacks, and malicious code). Required Education BS in Incident Management, Operations Management, Cybersecurity or related degree. HS Diploma with 7–9 years of incident management or cybersecurity experience. Desired Certifications GCIH, GCFA GISP, GCED, CCFP or CISSP. Previously part of a leading Fortune 100 company and headquartered in Dulles, VA; Nightwing became independent in 2024 but continues to support the nation's most mission‑impactful initiatives. For over four decades, our team has provided some of the world's most technically advanced full‑spectrum cyber, data operations, systems integration and intelligence support services to the U.S. Government on its most important missions. At Nightwing, we value collaboration and teamwork. You'll have the opportunity to work alongside talented individuals who are passionate about what they do, leveraging our collective expertise to drive innovation, solve complex problems, and deliver exceptional results for our clients. Nightwing is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age or any other federally protected class. #J-18808-Ljbffr Nightwing