Nightwing provides technically advanced full-spectrum cyber, data operations, systems integration and intelligence mission support services to meet our customers’ most demanding challenges. Our capabilities include cyber space operations, cyber defense and resiliency, vulnerability research, ubiquitous technical surveillance, data intelligence, lifecycle mission enablement, and software modernization. Nightwing brings disruptive technologies, agility, and competitive offerings to customers in the intelligence community, defense, civil, and commercial markets.
The DHS’s Hunt and Incident Response Team (HIRT) secures thenation’s infrastructure. HIRT provides DHS’s front-line response for cyber incidents and proactive hunting for malicious cyber activity.Nightwingprovidessupport for onand offsite incident response to Government agencies and criticalinfrastructureowners who experience cyber-attacks. Nightwingprovides HIRT advanced technical assistance, proactive hunting, rapid onsite incident response, and immediate investigation,using host and network-based cybersecurity analysis capabilities. Personnel perform investigations to characterizethelevel ofseverity of breachesanddevelop mitigationremediationplans Nightwingis seekinga Cyber Incident ResponseExpertto support this critical customer mission.
Responsibilities
- Serves as hunt and incident response subject matter expert (SME), applying in-depth knowledge on threat actor (TA) tools, techniques, and procedures (TTPs)
- Serves as an incident response expert in support ofa technology insertionteam
- Distills analytic findings into executive summaries and in-depth technical reports
-Provide expert support, analysis, and researchwith only broad direction into exceptionally complex problems and processes relating to the subject matter as it relates to hunt and incident response activities
- Serves as technical expert on high-level incident response teams providing technical direction, interpretation, and alternatives
- Exercises considerable latitude in determining technical objectives of an assignment or task at hand
- Independently develops technical solutions to complex problems that require the regular use of ingenuity and creativity
-Analyzesincident data and victim environments to recommend targeted mitigations
-Advise technical personnel on countermeasure implementation and customization
-Supportsinternal stakeholders on containment and eradication missions
-Documentsanalysis in a standardized knowledgebase for sharing and publication
-Assistsin maintaining branch process and procedure documentation
- Guides the completion of hunt and incident response activities
Required Skills
-U.S. Citizenship
-Musthavean activeTS/SCI clearance
- Must be able to obtain DHS Suitability
-7+ years of directly relevant experience inthe area of expertise
- 3+ years ofexperience related to the evaluation and implementation of new cyber response capabilities
- Must be able to travel domestically on short notice
-Strong understanding ofnetwork architecture/security
- Experience performing cyberincident response
- Ability to think independently
- Demonstrates superior written and oral communication skills
- Must be able to work collaboratively across physical locations
- Skilled in identifying different classes of attacks and attack stages
- Understanding of system and application security threats and vulnerabilities
- Understanding of proactive analysis of systems and networks, to include creating trust levels of critical resources
- Proficiency with common operating systems (e,g, Linux/Unix, Windows)
Desired Skills
-Experience leading and mentoring technical teams
- Knowledge of Computer Network Defense policies, procedures and regulations
-Knowledge of different operational threat environments (e.g., first generation [script kiddies], second generation [non nation-state sponsored], and third generation [nation-state sponsored])
- Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, PL/SQL and injections, race conditions, covert channel, replay, return- oriented attacks, and malicious code)
- Network and System administration experience
- Strong understanding ofadversarial tactics/techniques/procedures (TTPs)
- Experience withIdentity and Access Management (IAM)tools
- Ability to review and analyzeEnterprise Architecture (EA)from a security perspective
- Understanding of cyberdefense-in-depth principles
-Hands-on skill in host/network intrusion detection
- Ability to performevent correlation
- Experiencewithmalicious activity analysis
- Ability to collaborate withstakeholders at multiple levels within an organization
Required Education:
BS Computer Science, Cyber Security, Computer Engineering,or related degree; or HS Diploma &7+years oftechnicalexperiencein the area of expertise.
Desired Certifications:One or more
-DoD814001 IAT Level II, IASAE II, CSSP Analyst
- DoD 8140.01 GCIA, GCIH,CSSP Analyst/CSSP Incident Responder
- DoD 8140.01 CEH, CSSP Analyst
- SANS GIAC GNFA preferred
- SANS GRID, GICSP, or GCIP a plus
Syndeo: ESS-3426
At Nightwing, we value collaboration and teamwork. You’ll have the opportunity to work alongside talented individuals who are passionate about what they do. Together, we’ll leverage our collective expertise to drive innovation, solve complex problems, and deliver exceptional results for our clients.
Thank you for considering joining us as we embark on this new journey and shape the future of cybersecurity and intelligence together as part of the Nightwing team.
Nightwing is An Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age or any other federally protected class.
We are the intelligence services company that continually redefines the edge of the possible to keep advancing our national security interests.
