{"id":2957860,"url":"https://alion.io/job/nightwing-threat-intel-lead","title":"Threat Intel Lead","company":{"id":3852631,"name":"Nightwing","domain":"nightwing.com","url":"https://alion.io/company/nightwing-2","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":96,"open_postings":243,"ghost_share":0,"stale_share":0.152,"repost_share":0,"time_to_fill_p50_days":55,"computed_at":"2026-10-25T05:49:26Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Sterling, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":122000,"max":253000,"currency":"USD","period":"year","gross":null,"usd_annual":253000},"salary_estimate":null,"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Red Teaming","optional":false},{"name":"Censys","optional":true},{"name":"Cortex","optional":true},{"name":"Crowdstrike","optional":true},{"name":"Databricks","optional":true},{"name":"Incident Management","optional":true},{"name":"Microsoft Teams","optional":true},{"name":"OpenCTI","optional":true},{"name":"Power BI","optional":true},{"name":"Prometheus","optional":true},{"name":"ServiceNow","optional":true},{"name":"SharePoint","optional":true},{"name":"Shodan","optional":true}],"status":"live","first_seen_at":"2026-10-20T22:03:38Z","employer_posted_date":"2026-10-20","last_verified_at":"2026-10-23T07:23:44Z","board_verified":false,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"Nightwing provides technically advanced full-spectrum cyber, data operations, systems integration and intelligence mission support services to meet our customers’ most demanding challenges. Our capabilities include cyber space operations, cyber defense and resiliency, vulnerability research, ubiquitous technical surveillance, data intelligence, lifecycle mission enablement, and software modernization. Nightwing brings disruptive technologies, agility, and competitive offerings to customers in the intelligence community, defense, civil, and commercial markets.\nNightwing is seeking a Senior Manager to lead the Watch and Warning Analysis Team, which supports a U.S. Government customer. The team provides cybersecurity vulnerability analysis to reduce the prevalence and impact of vulnerabilities and exploitable conditions across Federal Civilian Executive Branch (FCEB) entities and Critical Infrastructure Key Resources (CIKR). The Watch and Warning Analysis Team utilizes cyber threat intelligence and strong analytical skills to analyze information from multiple sources, synthesize that information, and provide expert analysis to senior customer stakeholders.\nResponsibilities:\nLead a four-person cyber threat intelligence team to analyze emerging vulnerabilities and adversary campaigns; coordinate response efforts with government and industry partners\nTranslate executive directives and policy into analytic priorities and intelligence collection requirements for analysts; oversee quality assurance of analyst intelligence products and presentations\nPrioritize and coordinate cross-functional analytic projects, integrate technical data and enriched indicators of compromise into comprehensive adversary assessments that provide direction to cyber defenders\nReview daily vulnerability reporting to assess risk and potential impacts to critical infrastructure and FCEB entities; communicate findings to technical practitioners and Senior Executive Service (SES) leadership.\nUse attack surface management tools to assess vulnerability prevalence across federal agencies; develop mitigation plans and coordinate with threat hunting teams to reduce adversary exploitation risk\nAuthor and present weekly operational summaries, consolidate intelligence reports, and adversary campaign assessments using open source, commercial, and classified reporting.\nMonitor emerging threats and disruptive technologies in open source and classified reporting; identify and present findings in actionable recommendations \nAct as the Subject Matter Expert (SME) on technical matters for the Federal Staff; ensure government ideas are properly presented to external stakeholders and industry SMEs\nundefined\nRequired Skills:\nMust be a U.S. Citizen\nMust have an active TS/SCI clearance\nMust be able to obtain DHS Suitability\nAbility to work with minimal supervision; establish priorities and delivery schedules amid uncertain timelines and set quality assurance criteria for all project deliverables \nCandidates should have at least four years of experience producing analytic products (reports, briefings, or dashboards) based on real-world threats, incidents, or vulnerabilities\nExperience assessing adversary campaigns, capabilities, motivations, and tactics, techniques, and procedures to produce operational and strategic intelligence products\nExperience evaluating vulnerabilities, exposure, exploitability, and evidence of adversary use; assessing potential consequences for Federal Agencies and critical infrastructure\nExperience correlating indicators of compromise, technical reports, and open source, commercial, and classified reporting to develop supported adversary assessments\nExperience utilizing attack surface management tools or assessments from red teams\nDemonstrated team leadership experience; including the ability to mentor and teach new analysts and develop training pipelines\nExperience with directing cyber threat intelligence research into reports, presentations, and assessments for a variety of technology stacks\nExperience in developing and delivering technical briefings to both cyber practitioners and SES leadership\nKnowledge of system and application security threats and vulnerabilities; including how to mitigate the threats or vulnerabilities\nDesired Skills:\nPrevious work with OT/ICS/SCADA technologies; primarily associated vulnerabilities and historic adversary threats to these systems\nExperience in any capacity with critical infrastructure\nExperience with ransomware actors; including interactions or monitoring of access brokers, dark web forums, or negotiations\nExperience with emerging threats; including space systems, AI, and quantum computing\nAbility to clean, normalize, enrich, and analyze large datasets with inconsistent formats and schemas; identify and support intelligence assessments from these large datasets\nExperience in any of the following:\nAdministrative Applications (SharePoint, ServiceNow, Microsoft Teams Automation)\nCommercial Threat Intelligence (Shodan, Censys, GTI, CrowdStrike)\nLarge Data Analytics and Analysis Applications (DataBricks, Power BI)\nThreat Intelligence Platforms (Analyst1, OpenCTI)\nAttack Surface Management (BitSight, Cortex Expanse)\nRequired Education:\nBS Computer Science, Computer Engineering, Computer Information Systems, Cybersecurity, or related degree, or 10+ years experience in cyber incident management experience or cybersecurity experience with a High school diploma.\nDesired Certifications:\nCISM, CISSP, GCTI, GCED, GOSI, CTIA, CySA+\nundefined\nSyndeo: ESS-3668\n Salary & Benefits\n\nThe salary associated with this position ($122,000-$253,000) is commensurate with the selected candidate’s qualifications, years of relevant experience, and demonstrated level of expertise. Compensation will be determined based on these factors to ensure alignment with skills, responsibilities, and market standards.Nightwing offers medical, vision and dental insurance coverage in addition to a 401k plan, PTO, Holidays, and additional insurances.\nNightwing is An Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age or any other federally protected class.","description_format":"text","description_chars":6331,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"high_school","optional":false},"security_clearance":true,"languages":[]},"benefits":["401k plan","Dental insurance","Insurance coverage"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["National Security","Information Security","Security Operations"],"lifecycle":[{"event":"open","at":"2026-10-20T22:03:38Z"}],"visa":[],"liveness":{"score":99,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.993,"p_room":1,"age_days":4,"expected_fill_days":55,"reasons":["conf:46","urgency","velocity","win:early","comp:brand"],"computed_at":"2026-10-25T05:49:26Z"},"pay":{"stated_usd_annual":253000,"is_top_pay":true},"html_url":"https://alion.io/job/nightwing-threat-intel-lead","json_url":"https://alion.io/job/nightwing-threat-intel-lead.json","meta":{"generated_at":"2026-10-25T18:26:02Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":26195,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-26T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3852631},"rest":"https://alion.io/mcp/rest/get_company?id=3852631"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnightwing-threat-intel-lead"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnightwing-threat-intel-lead"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnightwing-threat-intel-lead"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/nightwing-threat-intel-lead\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnightwing-threat-intel-lead"}]}