(Cyber) Incident Management Analyst - Weekend Night Shift

Nightwing is supporting a U.S. Government customer to provide onsite incident response to civilian agencies and critical asset owners experiencing cyber attacks. The Cyber Incident Manager will investigate breaches, develop mitigation plans, and coordinate restoration efforts. Responsibilities Correlate incident data to identify trends in reported incidents. Recommend defense‑in‑depth principles and practices. Perform Computer Network Defense incident triage, determining scope, urgency, and potential impact. Research and compile known resolution steps or workarounds to mitigate potential incidents. Apply cybersecurity concepts to detection and defense of intrusions into IT networks and conduct cursory log data analysis. Monitor external data sources to maintain currency of threat conditions and assess impacts on the enterprise. Identify incident causes and determine key information to obtain from external entities about background and infection vectors. Receive and analyze network alerts from various sources, determining possible causes. Track and document incidents from initial detection through final resolution, coordinating with other components of the organization. Work shift schedules, triage incidents, research indicators of compromise (IOCs), and escalating to specialized analysts as needed. Required Skills U.S. Citizenship. Active TS/SCI clearance. Ability to obtain DHS Suitability. 5+ years of directly relevant experience in cyber incident management or cybersecurity operations. Knowledge of incident response and handling methodologies. Familiarity with NIST 800‑61 (latest revision) and FISMA standards for incident reporting. Ability to prioritize incidents, investigate phishing tactics, and recognize gaps in incident reporting. Understanding of attack stages (footprinting, scanning, enumeration, initial access, privilege escalation, persistence, exploitation, cover tracks). Skill in recognizing and categorizing vulnerabilities and associated attacks. Knowledge of basic system administration, OS hardening, and Computer Network Defense policies and procedures. Understanding of threat environments: script kiddies, non‑nation‑state, and nation‑state actors. Knowledge of system and application security threats and attack methods (buffer overflow, mobile code, XSS, PL/SQL injections, race conditions, covert channels, replay attacks, return‑oriented programming, malicious code). Desired Skills Advanced knowledge of threat environments and attack methods as listed above. Required Education BS in Incident Management, Operations Management, Cybersecurity, or a related degree. HS Diploma with 7–9 years of incident management or cyber security experience. Desired Certifications GCIH GCFA GISP GCED CCFP CISSP Location: Arlington, VA. Nightwing is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, age or any other federally protected class. #J-18808-Ljbffr