Cyber Eviction Analyst - Principal

Responsibilities

• Serves as hunt and incident response subject matter expert (SME), applying in-depth knowledge on threat actor (TA) tools, techniques, and procedures (TTPs)
• Distills analytic findings into executive summaries and in-depth technical reports
• Provides expert support, analysis, and research with only broad direction into exceptionally complex problems and processes relating to the subject matter as it relates to hunt and incident response activities
• Serves as technical expert on high-level incident response teams providing technical direction, interpretation, and alternatives
• Exercises considerable latitude in determining technical objectives of an assignment or task at hand
• Independently develops technical solutions to complex problems that require the regular use of ingenuity and creativity
• Analyzes incident data and victim environments to recommend targeted mitigations
• Advise technical personnel on countermeasure implementation and customization
• Supports internal stakeholders on containment and eradication missions
• Documents analysis in a standardized knowledgebase for sharing and publication
• Aids in the completion of hunt and incident response activities

Requirements

• U.S. Citizenship
• Active TS/SCI clearance
• Ability to obtain DHS Suitability
• 8+ years of directly relevant experience in the area of expertise
• Ability to travel domestically on short notice
• Strong understanding of network architecture/security
• Experience performing cyber incident response
• Ability to think independently
• Superior written and oral communication skills
• Ability to work collaboratively across physical locations
• Skilled in identifying different classes of attacks and attack stages
• Understanding of system and application security threats and vulnerabilities
• Proficiency with common operating systems (e.g., Linux/Unix, Windows)

Skills

• Experience leading and mentoring technical teams
• Knowledge of Computer Network Defense policies, procedures and regulations
• Knowledge of different operational threat environments (e.g., first generation [script kiddies], second generation [non nation-state sponsored], and third generation [nation-state sponsored])
• Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, PL/SQL and injections, race conditions, covert channel, replay, return-oriented attacks, and malicious code)
• Network and System administration experience
• Strong understanding of adversarial tactics/techniques/procedures (TTPs)
• Experience with Identity and Access Management (IAM) tools
• Understanding of cyber defense-in-depth principles
• Hands-on skill in host/network intrusion detection
• Experience with malicious activity analysis
• Ability to collaborate with stakeholders at multiple levels within an organization

Qualifications

• BS Computer Science, Cyber Security, Computer Engineering, or related degree; or HS Diploma & 10+ years of technical experience in the area of expertise.

Benefits

• At Nightwing, we value collaboration and teamwork.
• You’ll have the opportunity to work alongside talented individuals who are passionate about what they do.
• Together, we’ll leverage our collective expertise to drive innovation, solve complex problems, and deliver exceptional results for our clients.

Pay

Nightwing offers competitive compensation packages tailored to individual roles and qualifications.

Schedule

Flexible working hours and remote work options are available based on the needs of the position and the client.