Drimva

Node.Digital

Incident Manager (Junior)

Arlington, Virginia · Manager · Full-time · Posted Sep 16, 2026

Experience
2+ years of directly relevant experience; alternatively, HS Diploma with 4–6 years of incident management or cybersecurity experience.
Education
BS in Incident Management, Operations Management, Cybersecurity, or a related degree; alternatively, HS Diploma with 4–6 years of incident management or cybersecurity experience.

About the job

Supports a U.S. Government customer by triaging, investigating, coordinating, and documenting cyber incidents through resolution during an assigned onsite shift.

What you'll do

  • Triage incidents to assess scope, urgency, impact, and likely cause; analyze alerts and incident data.
  • Research mitigation steps, recommend defensive practices, and monitor threat information relevant to the enterprise.
  • Track incidents from detection through resolution and coordinate information with other organizational components.

What they ask for

  • U.S. citizenship and an active TS/SCI clearance; must be able to obtain DHS Suitability.
  • 2+ years of directly relevant experience in cyber incident management or cybersecurity operations.
  • Knowledge of incident response methodologies, NIST 800-62, FISMA incident reporting standards, and the NCCIC National Cyber Incident Scoring System.
  • Knowledge of attack stages, vulnerabilities and attacks, system administration, operating system hardening, and CND policies and procedures.

Nice to have

  • GCIH, GCFA, GISP, GCED, CCFP, or CISSP certification.
  • Knowledge of operational threat environments and system and application security threats and vulnerabilities.

Tools

NIST 800-62, FISMA, NCCIC National Cyber Incident Scoring System

Model-written summary · the original posting is authoritative

First seen Oct 29, 2026 · Last verified Nov 5, 2026 (UTC)