Node.Digital
Incident Manager (Midlevel)
Arlington, Virginia · Manager · Full-time · Posted Feb 4, 2026
- Experience
- 5+ years of directly relevant experience; alternatively, the education section allows a high school diploma with 7–9 years of incident management or cybersecurity experience.
- Education
- BS in Incident Management, Operations Management, Cybersecurity, or a related degree; alternatively, a high school diploma with 7–9 years of incident management or cybersecurity experience.
- Visa sponsorship
- Must be a U.S. citizen.
About the job
Manages cyber incident response by triaging alerts, investigating and documenting incidents, coordinating mitigation, and supporting service restoration for government customers.
What you'll do
- Triage and analyze Computer Network Defense incidents and network alerts, assessing scope, urgency, impact, and likely causes.
- Track incidents from detection through resolution; coordinate information and mitigation with organizational teams and external entities.
- Monitor threat information, identify incident trends, and recommend defensive measures and resolution steps.
What they ask for
- U.S. citizenship; active TS/SCI clearance; ability to obtain DHS Suitability.
- 5+ years of directly relevant cyber incident management or cybersecurity operations experience.
- Knowledge of incident response methodologies, NIST 800-62, FISMA incident reporting, and the NCCIC National Cyber Incident Scoring System.
- Knowledge of attack stages, vulnerabilities and attacks, system administration, operating system hardening, and Computer Network Defense policies and procedures.
Nice to have
- Knowledge of operational threat environments and system/application security threats and vulnerabilities.
- Certifications: GCIH, GCFA, GISP, GCED, CCFP, or CISSP.
Tools
NIST 800-62, FISMA, NCCIC National Cyber Incident Scoring System
Model-written summary · the original posting is authoritative