ZipRecruiter

Log In

1

Director Netwitness Jobs (NOW HIRING)

Saic

Lead Cloud Security Engineer

Washington, DC · On-site

$160 - $200/hr

Certified Netskope Engineer, with Direct experience implementing Netskope or comparable SASE/SSE ... Experience with Splunk, NetWitness, SolarWinds, Wireshark, or comparable security/network ...

SAIC

Lead Cloud Security Engineer

Washington, DC · On-site

$63 - $84.25/hr

Certified Netskope Engineer, with Direct experience implementing Netskope or comparable SASE/SSE ... Experience with Splunk, NetWitness, SolarWinds, Wireshark, or comparable security/network ...

SAIC

Lead Cloud Security Engineer

Washington, DC · On-site

$160K - $200K/yr

Certified Netskope Engineer, with Direct experience implementing Netskope or comparable SASE/SSE ... Experience with Splunk, NetWitness, SolarWinds, Wireshark, or comparable security/network ...

SAIC

Lead Cloud Security Engineer

Washington, DC · On-site

$63.25 - $84.50/hr

Certified Netskope Engineer, with Direct experience implementing Netskope or comparable SASE/SSE ... Experience with Splunk, NetWitness, SolarWinds, Wireshark, or comparable security/network ...

next page

Showing results 1-20

All JobsGovernment JobsDirector Netwitness Jobs

Director Netwitness information

What is a Director NetWitness?

Director NetWitness professionals oversee the deployment, management, and optimization of NetWitness security solutions within organizations. They are responsible for leading teams that monitor, detect, and respond to cybersecurity threats using NetWitness technologies. Their role involves strategic planning, ensuring effective incident response, and aligning security operations with business objectives. They also coordinate with other IT and security leaders to maintain robust cybersecurity defenses and compliance.

How does a Director NetWitness typically collaborate with other departments to enhance cybersecurity initiatives?

A Director NetWitness frequently works cross-functionally with IT, risk management, compliance, and executive leadership teams to implement and optimize threat detection and response strategies. They oversee the integration of NetWitness solutions with other security tools, facilitate incident response efforts, and ensure seamless information sharing across departments. This collaborative approach helps align cybersecurity measures with broader business objectives and regulatory requirements, fostering a unified defense posture across the organization.

What are the key skills and qualifications needed to thrive as a Director NetWitness?

To thrive as a Director NetWitness, you need in-depth expertise in cybersecurity, threat detection, and incident response, typically supported by a degree in computer science or a related field and significant leadership experience. Familiarity with NetWitness and other SIEM platforms, as well as certifications like CISSP, CISM, or GIAC, are commonly required. Strong leadership, strategic thinking, and communication skills distinguish outstanding professionals in this role. These skills are critical for effectively managing security teams, mitigating threats, and ensuring the organization's cybersecurity posture.

What is the difference between Director Netwitness vs Security Analyst?

AspectDirector NetwitnessSecurity Analyst
CredentialsCertifications like CISSP, GIAC, or CEH often preferredCertifications such as Security+, CISSP, or GIAC common
Work EnvironmentLeads security teams, manages incident response, strategic planningMonitors security alerts, investigates incidents, implements security measures
Industry UsageUsed in cybersecurity firms, large enterprises, government agenciesFound across various organizations, including corporations and government

The Director Netwitness focuses on strategic leadership, overseeing security operations and incident response, while the Security Analyst handles day-to-day monitoring and investigation of security threats. Both roles require relevant certifications and are integral to cybersecurity teams, but differ in scope and responsibilities.

What are the most commonly searched types of Netwitness jobs?

The most popular types of Netwitness jobs are:

Director Netwitness jobs near you

Incident Response Analyst

Cyber Synergy Consulting Group

Washington, DC • On-site

$100K - $125K/yr

Full-time

Re-posted 24 days ago

Job description

Incident Response Analyst (Task 4 – Federal Cybersecurity Contract)Location: Remote with occasional on-site (Washington, D.C. Metro Area)Employment Type: Full-TimeClearance: Public Trust (or eligibility to obtain)We are seeking an experienced Incident Response Analyst to support Task 4 – Incident Response Management on a federal cybersecurity services contract. This role provides front-line security event triage, investigation, reporting, and coordination across multiple federal cybersecurity teams.The ideal candidate has hands-on experience with enterprise IR tooling-CrowdStrike, FireEye (Trellix), Splunk, NetWitness, and Magnet AXIOM-and is comfortable working in a high-tempo operational environment aligned with federal cybersecurity frameworks (NIST, FISMA, OMB).Key ResponsibilitiesPerform initial triage of security events from SIEM, EDR, NDR, and log sources, including CrowdStrike, FireEye/Trellix, Splunk, NetWitness, and related platforms.Conduct incident investigations, including host and network forensics, log analysis, and evidence review using tools such as NetWitness and AXIOM.Coordinate closely with HHS CSIRC, OpDiv incident response teams, system owners, and security engineering staff to validate findings and recommend containment actions.Provide daily updates, SITREPs, and written documentation of incident status, investigative steps, and remediation recommendations.Develop incident dashboards and knowledge base documentation within Splunk and other IR platforms.Support containment, eradication, and recovery efforts aligned to federal IR procedures.Participate in tabletop exercises, readiness assessments, and operational continuity testing.Monitor and manage the Incident Response Team (IRT) mailbox; escalate urgent items within required SLAs.Assist with audit support, evidence gathering, and post-incident reviews.Contribute to continuous improvement of incident response processes and playbooks.Required Qualifications2–5+ years of experience in cybersecurity operations, SOC analysis, or incident response.Direct hands-on experience with IR tools, including:CrowdStrike Falcon (EDR)FireEye/Trellix (HX, Helix, or equivalent)Splunk (SIEM, dashboards, search queries)NetWitness (network forensics, packet analysis)Magnet AXIOM (host forensics)Strong understanding of adversary techniques, malware behavior, incident timelines, and forensic artifacts.Familiarity with NIST 800-61, NIST 800-53, FISMA, OMB guidance.Ability to clearly document investigations and communicate findings to technical and non-technical audiences.Eligibility to obtain and maintain a Public Trust clearance.Preferred QualificationsExperience supporting federal agencies (HHS, DHS, DoD, DOJ, etc.).Certifications such as Security+, CySA+, CEH, GCIH, GCIA, CHFI, or related.Experience performing threat hunting across EDR, SIEM, and NDR tools.Familiarity with packet analysis tools (Wireshark) and scripting languages (Python, PowerShell).Experience with ServiceNow or similar ticketing platformsWork Schedule & ExpectationsCore hours: 7:00 AM – 5:00 PM EST, Monday through Friday, with the flexibility to support after-hours incidents as needed.Participation in on-call rotations may be required.Remote work permitted with reliable connectivity and camera-enabled participation.