Senior Cyber Security Consultant

Nightwing provides technically advanced full-spectrum cyber, data operations, systems integration and intelligence mission support services to meet our customers’ most demanding challenges. Our capabilities include cyber space operations, cyber defense and resiliency, vulnerability research, ubiquitous technical surveillance, data intelligence, lifecycle mission enablement, and software modernization. Nightwing brings disruptive technologies, agility, and competitive offerings to customers in the intelligence community, defense, civil, and commercial markets.

Nightwing is seeking a Senior Cyber Security Consultant who is responsible for providing strategic cybersecurity consultation. This person will be onsite in the client’s headquarters as a representative of Nightwing. This role involves consulting with client representatives on a daily basis to advance their cybersecurity posture, investigating complex security incidents, and continuously improving security operations. This role requires onsite 5 days per week during training period.

After training period, hybrid work schedule is available based on client policy.

• Strategy & Collaboration
  • Proactively identify gaps in client security program and architecture and recommend solutions
  • Serve as a communications bridge between multiple cyber teams
  • Participate at executive level meetings as organizational representative, and provide strategic input on cybersecurity roadmaps
  • Develop security solutions/processes that are mindful of operational budget constraints
• Security Monitoring & Analysis
  • Monitor security alerts and events from SIEM, IDS/IPS, EDR, and other security tools
  • Provide guidance on complex investigations and escalations
  • Analyze complex security incidents and determine scope, impact, and root cause
  • Correlate data from multiple sources to identify sophisticated attack patterns
  • Participate in on-call rotation if needed for surge support or incident investigation
  • Contribute to SOC process improvements and automation initiatives
• Incident Response
  • Lead incident response efforts for high-severity security events
  • Contain, eradicate, and recover from security incidents
  • Document incidents thoroughly and create detailed reports
  • Perform post-incident reviews and develop lessons learned
  • Coordinate with IT teams and stakeholders during incident response
• Threat Intelligence & Detection Engineering
  • Recommend tuning and develop use cases to reduce false positives and improve alert quality
  • Create and maintain playbooks and standard operating procedures
  • Contribute to threat intelligence sharing and analysis
• Reporting & Communication
  • Prepare detailed reports and executive summaries
  • Present findings to management and technical teams
  • Maintain accurate documentation of procedures and investigations
  • Communicate effectively with stakeholders across the organization

• Experience
• Bachelor’s degree in a related field
• Must have a minimum of 7+ years of experience in cybersecurity
• 3+ years of hands‑on experience with SIEM platforms, Microsoft Sentinel required
• Experience in client‑facing role or consulting is preferred
• Proven experience in incident response
• Experience with endpoint detection and response (EDR) tools

• Deep understanding of network protocols, architecture, and security
• Proficiency in log analysis and security event correlation
• Familiarity with threat frameworks (MITRE ATT&CK, Cyber Kill Chain)
• Strong understanding of Windows, Linux, and cloud environments
• Experience with scripting languages (Python, Power Shell, Bash)

• Proactive and self-motivated
• Risk-management and budgetary awareness
• Strong analytical and problem-solving abilities
• Excellent written and verbal communication skills
• Ability to work under…