(Cyber) Incident Management Analyst - Hybrid with Security Clearance

Overview Nightwing delivers advanced cyber, data operations, systems integration, and intelligence mission‑support services to U.S. Government customers. The current contract involves onsite incident response for civilian agencies and critical asset owners affected by cyber‑attacks. This role supports the rapid investigation, mitigation, and restoration of services for severe security incidents. Responsibilities Research and compile known resolution steps or workarounds to enable mitigation of potential Computer Network Defense incidents within the enterprise. Apply knowledge of tactics, techniques, and procedures of various threat actors to identify and validate threats. Use cybersecurity concepts to detect and defend against intrusions into small and large‑scale IT networks, and conduct cursory log data analysis. Conduct cursory analysis of log data to identify the cause of incidents and determine key questions for external entities about incident background and potential infection vectors. Track and document Computer Network Defense (CND) incidents from initial detection through final resolution. Collaborate with other organizational components to obtain and coordinate information related to ongoing incidents. When applicable, work shift schedules to triage and research incidents for Indicators of Compromise (IOCs) and escalate to specialized analysts. Required Skills U.S. Citizenship. Active TS/SCI clearance (and ability to obtain DHS Suitability). At least 2 years of directly relevant experience in cyber incident management or cybersecurity operations. Knowledge of incident response and handling methodologies. Knowledge of the NCCIC National Cyber Incident Scoring System for triage prioritization. Understanding of general attack stages, including footprinting, scanning, enumeration, privilege escalation, persistence, exploitation, and cover‑up. Ability to recognize and categorize types of vulnerabilities and associated attacks. Basic system administration and operating system hardening techniques. Computer Network Defense policies, procedures, and regulations. Awareness of different operational threat environments (script kiddies, non‑nation‑state, nation‑state). Knowledge of system and application security threats and attack methods (buffer overflow, mobile code, cross‑site scripting, SQL/PLSQL injection, race conditions, covert channels, replay, return‑oriented attacks, malicious code). Ability to work collaboratively across physical locations. Desired Skills Knowledge of basic system administration and operating system hardening techniques. Computer Network Defense policies, procedures, and regulations. Awareness of different operational threat environments. Understanding of system and application security threats and attack methods. Required Education Bachelor’s degree in Incident Management, Operations Management, Cybersecurity, or a related field; or high school diploma with 4‑6 years of incident management or cybersecurity experience. Desired Certifications GCIH, GCFA, GISP, GCED, CCFP, or CISSP. Equal Opportunity Statement Nightwing is an Equal Opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age or any other federally protected class. #J-18808-Ljbffr Nightwing