Cyber Incident Response Expert
NightwingAbout the role
Nightwing provides technically advanced full-spectrum cyber, data operations, systems integration and intelligence mission support services to meet our customers’ most demanding challenges. Our capabilities include cyber space operations, cyber defense and resiliency, vulnerability research, ubiquitous technical surveillance, data intelligence, lifecycle mission enablement, and software modernization. Nightwing brings disruptive technologies, agility, and competitive offerings to customers in the intelligence community, defense, civil, and commercial markets.
The DHS’s Hunt and Incident Response Team (HIRT) secures the nation’s infrastructure. HIRT provides DHS’s front-line response for cyber incidents and proactive hunting for malicious cyber activity. Nightwing provides support for on and offsite incident response to Government agencies and critical infrastructure owners who experience cyber-attacks. Nightwing provides HIRT advanced technical assistance, proactive hunting, rapid onsite incident response, and immediate investigation, using host and network-based cybersecurity analysis capabilities. Personnel perform investigations to characterize the level of severity of breaches and develop mitigation/remediation plans. Nightwing is seeking a Cyber Incident Response Expert to support this critical customer mission.
Responsibilities:
- Serves as hunt and incident response subject matter expert (SME), applying in-depth knowledge on threat actor (TA) tools, techniques, and procedures (TTPs)
- Serves as an incident response expert in support of a technology insertion team
- Distills analytic findings into executive summaries and in-depth technical reports
- Provide expert support, analysis, and research with only broad direction into exceptionally complex problems and processes relating to the subject matter as it relates to hunt and incident response activities
- Serves as technical expert on high-level incident response teams providing technical direction, interpretation, and alternatives
- Exercises considerable latitude in determining technical objectives of an assignment or task at hand
- Independently develops technical solutions to complex problems that require the regular use of ingenuity and creativity
- Analyzes incident data and victim environments to recommend targeted mitigations
- Advise technical personnel on countermeasure implementation and customization
- Supports internal stakeholders on containment and eradication missions
- Documents analysis in a standardized knowledgebase for sharing and publication
- Assists in maintaining branch process and procedure documentation
- Guides the completion of hunt and incident response activities
Required Skills:
- U.S. Citizenship
-
Apply for this role
Generate a tailored application kit with a matched cover letter, interview prep, and CV highlights — in under 60 seconds.
Apply Now →Generate Application KitFree account required — sign up in 30s