Incident Response Expert / Cyber Eviction AnalystLocation: Arlington, VAMust have an active Top Secret Security ClearanceNode.Digital is an innovative minority-owned solutions and services company specializing in AI & Automation. We combine proprietary agile development services with next-generation technology to create seamless customer experiences, driving digitalization and automation across industries. Our mission is to blend story, strategy, and technology to deliver frictionless multichannel user experiences.As an Incident Response Expert / Cyber Eviction Analyst, you will play a critical role in protecting our clients' digital assets and infrastructure. You will serve as a subject matter expert in cyber incident response, applying deep knowledge of threat actor tools, techniques, and procedures to identify, contain, and eradicate threats. Your expertise will help shape technical objectives, develop creative solutions, and guide incident response teams in high-stakes environments.Key responsibilities include:Serving as a hunt and incident response subject matter expert, providing technical direction and alternatives to response teamsApplying deep knowledge of threat actor tools, techniques, and procedures (TTPs) to complex incident response challengesProducing executive summaries and detailed technical reports for stakeholdersConducting expert analysis and research on hunt and incident response problems with broad directionSetting technical objectives and developing creative solutions to complex security issuesAnalyzing incident data and victim environments to recommend targeted mitigationsAdvising on countermeasure implementation and customizationSupporting containment and eradication missionsDocumenting analysis in a standardized knowledge base and maintaining process/procedure documentationGuiding completion of hunt and incident response activities across multiple environmentsRequirementsRequired Qualifications:Bachelor’s degree in Computer Science, Cyber Security, Computer Engineering, or a related field; or a high school diploma with 10+ years of technical experience8+ years of cyber incident response experience, including threat hunting, containment, and eradicationProficiency administering and investigating on both Linux/Unix and Windows systemsHands-on experience using Splunk as a SIEM for incident response or threat huntingStrong understanding of network architecture, network security concepts, and attack stages/classesIncident response experience across on-premises, cloud environments, and Windows Active DirectoryMeets DoD 8140.01 certification requirements at IAT II, IASAE II, or CSSP Analyst levelU.S. citizen with an active TS/SCI clearance and ability to obtain DHS suitabilityAbility to travel domestically on short notice (~25%)Experience producing executive summaries and detailed technical incident response reportsPreferred Qualifications:Holds at least one of the following certifications: GCIA, GCIH, CEH, or GIAC GNFAExperience with leadership or mentoring in incident response teamsFamiliarity with CND policies and proceduresKnowledge of threat environments, network/system administration, and IAM toolsExperience with enterprise architecture security review and defense-in-depth strategiesExpertise in host and network intrusion detection, event correlation, and malicious activity analysisStrong collaboration skills with stakeholders across multiple locationsBenefitsWe are proud to offer competitive compensation and benefits packages to include: Medical Dental Vision Basic Life Long-Term Disability Health Saving Account 401K Three weeks of PTO 10 Paid Holidays Pre-Approved Online Training
Incident Response Expert / Cyber Eviction Analyst
Location: Arlington, VA
Must have an active Top Secret Security Clearance
Node.Digital is an innovative minority-owned solutions and services company specializing in AI & Automation. We combine proprietary agile development services with next-generation technology to create seamless customer experiences, driving digitalization and automation across industries. Our mission is to blend story, strategy, and technology to deliver frictionless multichannel user experiences.
As an Incident Response Expert / Cyber Eviction Analyst, you will play a critical role in protecting our clients' digital assets and infrastructure. You will serve as a subject matter expert in cyber incident response, applying deep knowledge of threat actor tools, techniques, and procedures to identify, contain, and eradicate threats. Your expertise will help shape technical objectives, develop creative solutions, and guide incident response teams in high-stakes environments.
Key responsibilities include:
- Serving as a hunt and incident response subject matter expert, providing technical direction and alternatives to response teams
- Applying deep knowledge of threat actor tools, techniques, and procedures (TTPs) to complex incident response challenges
- Producing executive summaries and detailed technical reports for stakeholders
- Conducting expert analysis and research on hunt and incident response problems with broad direction
- Setting technical objectives and developing creative solutions to complex security issues
- Analyzing incident data and victim environments to recommend targeted mitigations
- Advising on countermeasure implementation and customization
- Supporting containment and eradication missions
- Documenting analysis in a standardized knowledge base and maintaining process/procedure documentation
- Guiding completion of hunt and incident response activities across multiple environments
Requirements
Required Qualifications:
- Bachelor’s degree in Computer Science, Cyber Security, Computer Engineering, or a related field; or a high school diploma with 10+ years of technical experience
- 8+ years of cyber incident response experience, including threat hunting, containment, and eradication
- Proficiency administering and investigating on both Linux/Unix and Windows systems
- Hands-on experience using Splunk as a SIEM for incident response or threat hunting
- Strong understanding of network architecture, network security concepts, and attack stages/classes
- Incident response experience across on-premises, cloud environments, and Windows Active Directory
- Meets DoD 8140.01 certification requirements at IAT II, IASAE II, or CSSP Analyst level
- U.S. citizen with an active TS/SCI clearance and ability to obtain DHS suitability
- Ability to travel domestically on short notice (~25%)
- Experience producing executive summaries and detailed technical incident response reports
Preferred Qualifications:
- Holds at least one of the following certifications: GCIA, GCIH, CEH, or GIAC GNFA
- Experience with leadership or mentoring in incident response teams
- Familiarity with CND policies and procedures
- Knowledge of threat environments, network/system administration, and IAM tools
- Experience with enterprise architecture security review and defense-in-depth strategies
- Expertise in host and network intrusion detection, event correlation, and malicious activity analysis
- Strong collaboration skills with stakeholders across multiple locations
Benefits
We are proud to offer competitive compensation and benefits packages to include:
- Medical
- Dental
- Vision
- Basic Life
- Long-Term Disability
- Health Saving Account
- 401K
- Three weeks of PTO
- 10 Paid Holidays
- Pre-Approved Online Training
Node.Digital is an innovative minority-owned solutions and services company that specializes in AI & Automation. We combine our proprietary agile development services (CxD) with next generation technology development to create seamless and beneficial customer experiences. We drive digitalization and automation by blending the right combination of story, strategy and technology to create frictionless multichannel user experiences
Node.Digital is an innovative minority-owned solutions and services company that specializes in AI & Automation. We combine our proprietary agile development services (CxD) with next generation technology development to create seamless and beneficial customer experiences. We drive digitalization and automation by blending the right combination of story, strategy and technology to create frictionless multichannel user experiences
