Skip to content

Open nowPosted 4 days ago

Threat Intel Lead

Nightwing363 open roles

Pay
$122,000 – $253,000 a year
Where
Sterling, VA
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowThreat Intel LeadNightwing · Sterling, VA
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Nightwing's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.1% of postings close within 7 days. Measured by our own scanner across the market. Nightwing postings stay open a median of 50 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.1%7 days
  4. 19.1%14 days
  5. 35.6%30 days
  6. 52.7%60 days
This job: posted 4 days ago

Nightwing median: 50 days open

The posting

Nightwing provides technically advanced full-spectrum cyber, data operations, systems integration and intelligence mission support services to meet our customers’ most demanding challenges. Our capabilities include cyber space operations, cyber defense and resiliency, vulnerability research, ubiquitous technical surveillance, data intelligence, lifecycle mission enablement, and software modernization. Nightwing brings disruptive technologies, agility, and competitive offerings to customers in the intelligence community, defense, civil, and commercial markets.

Nightwing is seeking a Senior Manager to lead the Watch and Warning Analysis Team, which supports a U.S. Government customer. The team provides cybersecurity vulnerability analysis to reduce the prevalence and impact of vulnerabilities and exploitable conditions across Federal Civilian Executive Branch (FCEB) entities and Critical Infrastructure Key Resources (CIKR). The Watch and Warning Analysis Team utilizes cyber threat intelligence and strong analytical skills to analyze information from multiple sources, synthesize that information, and provide expert analysis to senior customer stakeholders.

Responsibilities:

  • Lead a four-person cyber threat intelligence team to analyze emerging vulnerabilities and adversary campaigns; coordinate response efforts with government and industry partners
  • Translate executive directives and policy into analytic priorities and intelligence collection requirements for analysts; oversee quality assurance of analyst intelligence products and presentations
  • Prioritize and coordinate cross-functional analytic projects, integrate technical data and enriched indicators of compromise into comprehensive adversary assessments that provide direction to cyber defenders
  • Review daily vulnerability reporting to assess risk and potential impacts to critical infrastructure and FCEB entities; communicate findings to technical practitioners and Senior Executive Service (SES) leadership.
  • Use attack surface management tools to assess vulnerability prevalence across federal agencies; develop mitigation plans and coordinate with threat hunting teams to reduce adversary exploitation risk
  • Author and present weekly operational summaries, consolidate intelligence reports, and adversary campaign assessments using open source, commercial, and classified reporting.
  • Monitor emerging threats and disruptive technologies in open source and classified reporting; identify and present findings in actionable recommendations
  • Act as the Subject Matter Expert (SME) on technical matters for the Federal Staff; ensure government ideas are properly presented to external stakeholders and industry SMEs
  • undefined

Required Skills:

  • Must be a U.S. Citizen
  • Must have an active TS/SCI clearance
  • Must be able to obtain DHS Suitability
  • Ability to work with minimal supervision; establish priorities and delivery schedules amid uncertain timelines and set quality assurance criteria for all project deliverables
  • Candidates should have at least four years of experience producing analytic products (reports, briefings, or dashboards) based on real-world threats, incidents, or vulnerabilities
  • Experience assessing adversary campaigns, capabilities, motivations, and tactics, techniques, and procedures to produce operational and strategic intelligence products
  • Experience evaluating vulnerabilities, exposure, exploitability, and evidence of adversary use; assessing potential consequences for Federal Agencies and critical infrastructure
  • Experience correlating indicators of compromise, technical reports, and open source, commercial, and classified reporting to develop supported adversary assessments
  • Experience utilizing attack surface management tools or assessments from red teams
  • Demonstrated team leadership experience; including the ability to mentor and teach new analysts and develop training pipelines
  • Experience with directing cyber threat intelligence research into reports, presentations, and assessments for a variety of technology stacks
  • Experience in developing and delivering technical briefings to both cyber practitioners and SES leadership
  • Knowledge of system and application security threats and vulnerabilities; including how to mitigate the threats or vulnerabilities

Desired Skills:

  • Previous work with OT/ICS/SCADA technologies; primarily associated vulnerabilities and historic adversary threats to these systems
  • Experience in any capacity with critical infrastructure
  • Experience with ransomware actors; including interactions or monitoring of access brokers, dark web forums, or negotiations
  • Experience with emerging threats; including space systems, AI, and quantum computing
  • Ability to clean, normalize, enrich, and analyze large datasets with inconsistent formats and schemas; identify and support intelligence assessments from these large datasets
  • Experience in any of the following:
  • Administrative Applications (SharePoint, ServiceNow, Microsoft Teams Automation)
  • Commercial Threat Intelligence (Shodan, Censys, GTI, CrowdStrike)
  • Large Data Analytics and Analysis Applications (DataBricks, Power BI)
  • Threat Intelligence Platforms (Analyst1, OpenCTI)
  • Attack Surface Management (BitSight, Cortex Expanse)

Required Education:

BS Computer Science, Computer Engineering, Computer Information Systems, Cybersecurity, or related degree, or 10+ years experience in cyber incident management experience or cybersecurity experience with a High school diploma.

Desired Certifications:

  • CISM, CISSP, GCTI, GCED, GOSI, CTIA, CySA+
  • undefined

Syndeo: ESS-3668

Salary & Benefits

The salary associated with this position ($122,000-$253,000) is commensurate with the selected candidate’s qualifications, years of relevant experience, and demonstrated level of expertise. Compensation will be determined based on these factors to ensure alignment with skills, responsibilities, and market standards.

Nightwing offers medical, vision and dental insurance coverage in addition to a 401k plan, PTO, Holidays, and additional insurances.

Nightwing is An Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age or any other federally protected class.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Nightwing's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on Nightwing's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    Nightwing's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.