Incident Response Expert with Night Wing

Title: Incident Response Expert
Company: Nightwing
Location: Arlington, VA
Duration: 18 Months, potential to extend

Must Haves
• Active TS/SCI clearance with Ability to obtain DHS Suitability
• 7+ years of directly relevant cyber incident response experience
• 3+ years of experience evaluating and implementing new cyber response capabilities
• Strong understanding of network architecture and network security
• Hands-on experience performing cyber incident response activities
• Ability to work independently with limited direction on complex problems
• Strong written and verbal communication skills, including technical reporting
• Ability to collaborate effectively across distributed teams and physical locations
• Experience identifying attack classes, attack stages, and threat actor behaviors
• Understanding of system and application security threats and vulnerabilities
• Experience with proactive analysis of systems and networks
• Proficiency with common operating systems (Linux/Unix, Windows)
• Ability to travel domestically on short notice
Plusses
• Experience leading or mentoring technical teams
• Knowledge of Computer Network Defense (CND) policies, procedures, and regulations
• Experience supporting multiple threat environments, including nation-state actors
• Strong understanding of adversarial tactics, techniques, and procedures (TTPs)
• Network or system administration background
• Experience with Identity and Access Management (IAM) tools
• Ability to review and analyze Enterprise Architecture (EA) from a security perspective
• Understanding of cyber defense-in-depth principles
• Hands-on experience with host- and network-based intrusion detection
• Experience performing event correlation and malicious activity analysis
• DoD 8140.01 IAT Level II, IASAE II, CSSP Analyst or Incident Responder
• GIAC certifications (GCIA, GCIH, GNFA preferred; GRID, GICSP, GCIP a plus)
Day to Day Responsibilities
Insight Global is currently seeking an Incident Response Expert III to join a client in the federal cybersecurity and government services industry supporting DHS’s Hunt and Incident Response Team (HIRT). This individual will serve as a subject matter expert for hunt and incident response operations, applying deep knowledge of threat actor tools, techniques, and procedures to complex investigations. Daily responsibilities include analyzing incident data, assessing victim environments, and recommending targeted mitigation and remediation actions. The role requires developing technical solutions independently, providing expert guidance to high-level incident response teams, and supporting containment and eradication missions. This individual will distill findings into executive summaries and detailed technical reports while documenting analysis in standardized knowledgebases. The role also supports process and procedure documentation and collaborates closely with internal stakeholders across geographically distributed teams.