Action Officer with Security Clearance

Company Overview Nightwing delivers technically advanced cyber, data operations, systems integration, and intelligence support services to government and commercial customers. The firm specializes in cyber space operations, cyber defense, vulnerability research, technical surveillance, data intelligence, lifecycle mission enablement, and software modernization. Responsibilities Supporting the management of cyber incidents through the incident response lifecycle. Creating and maintaining routine reporting of cyber incidents in official systems of record, including case management systems and ticketing. Coordinating with internal and external customers, partners, and stakeholders. Ingesting, validating, and evaluating information to determine optimal courses of action, including providing response support to requesting entities. Updating and tracking cases and tickets with accuracy, timeliness, reliability, and consistency. Drafting summaries of ongoing operations and providing oral presentations for various levels of leadership. Maintaining knowledge objects in systems of record consistently and professionally. Threat and vulnerability management to recognize and categorize types of vulnerabilities, threat actors, and operational threat environments, and associated attacks (MITRE ATT&CK framework). Knowledgeable of network security monitoring, security operations analysis, system administration, operating system hardening, cyber hygiene techniques, and cybersecurity defense policies, procedures, and regulations. Required Skills U.S. Citizenship Must have an active TS/SCI clearance Must be able to obtain DHS Suitability 5+ years of directly relevant experience in cyber incident management or cybersecurity operations Knowledge of incident response, threat hunting, and handling methodologies Ability to track multiple active engagements, personnel or equipment deployments, and coordinate with internal and external stakeholders Knowledge of the NCCIC National Cyber Incident Scoring System to prioritize triaging of incidents Knowledge of general attack stages (e.g., footprinting and scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks) Skill in recognizing threat actor campaigns, tactics, techniques, and procedures Familiar with basic system and network administration, traffic analysis techniques, Computer Network Defense policies, procedures and regulations Knowledge of different operational threat environments (first, second, and third generation) Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, PL/SQL injections, race conditions, covert channel, replay, return-oriented attacks, malicious code) Excellent oral and written communication skills Education and Certifications Bachelor’s degree in Incident Management, Operations Management, Cybersecurity, or a related field High School diploma with 7–9 years of Incident Management or Cyber Security experience Desired certifications: GCIH Equal Opportunity Statement Nightwing is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age, or any other federally protected class. #J-18808-Ljbffr Nightwing