[Hiring] Cyber Analyst (Tier 2) / Incident Commander @Valiant Solutions, LLC

Role Description

Valiant Solutions is seeking a Cyber Analyst (Tier 2) / Incident Commander to join our rapidly growing and innovative cybersecurity team!

As a Cyber Analyst (Tier 2) / Incident Commander, you and your team will man a 24x7x365 cybersecurity operations and coordination center. You will:

• Manage escalated alerts, notifications, and communications.
• Execute core incident response activities, including tracking the lifecycle of events.
• Manage stakeholder communication and drive remediation and recovery actions.
• Ensure all reports are accurately documented in the incident tracking system.
• Coordinate directly with reporting entities to gain a full understanding of each event.
• Strictly follow established SOPs for the escalation and notification of Federal Leadership.

The ideal candidate must possess deep knowledge of:

• Cybersecurity incidents.
• Anomaly analysis.
• Log analysis.
• Digital forensics.
• Common threat vectors.

You must demonstrate a strong understanding of:

• Splunk SIEM.
• Microsoft Defender EDR.
• XSOAR.
• Support forensic tools to effectively analyze data and guide response activities.

This role requires a blend of technical expertise and compliance-minded discipline to maintain operational readiness and meet stringent federal reporting procedures.

Must be able to obtain and maintain a Public Trust. This position allows for 100% remote work.

Qualifications

• 7+ years of relevant work experience or a Bachelor’s Degree with 2+ years of relevant experience.
• US Citizenship and must be able to pass a background investigation (Public Trust – High Risk).
• Excellent organizational, verbal, presentation/facilitation, and written communication skills.
• Comfortable presenting briefings to the client.
• Demonstrate proficiency in the Incident Response Process and SOC operations.
• Good understanding of threat hunting.
• Good understanding of system log information and where to collect specific data/attributes as required for the Incident Event.
• Operational understanding of enterprise networking and security tools (firewalls, Antivirus, HIDS, IDS/IPS, proxy, WAF).
• Experience performing log analysis and reporting.
• Experience creating and tracking investigations to resolution.
• Experience with Endpoint security solutions, including but not limited to: Windows Defender, Antivirus Solutions, and EDR Tools.
• Understanding of compliance or regulatory frameworks (i.e., FISMA, NIST, ISO).
• Solid understanding of application, authentication, network security principles, and operating system hardening techniques.
• General knowledge of cyber-attack frameworks (MITRE ATT&CK and Lockheed Cyber Kill Chain).
• Understanding of Computer Network Defense (CND) policies, procedures, and regulations.
• SIEM monitoring and analysis, analyzing network traffic, log analysis, prioritizing and differentiating between potential intrusion attempts and false alarms.
• Ability to work with or support senior leaders to understand risk factors and communicate effective mitigation strategies.
• Ability to work independently to address and resolve a security incident with minimal supervision.

Responsibilities

• Supports/develops reports during and after incidents, which include all actions taken to properly mitigate, recover and return operations to normal operations.
• Lead and actively participate in security-related meetings and discussions with the client.
• Perform incident response analysis based on investigation requirements.
• Participate in the remediation of incidents and responses that are generated from live threats against the enterprise.
• Record and report all incidents per Federal and department policy.
• Create and track network incidents and investigations through closure.
• Serve as key personnel for Incident Management; provide coordination, task assignment, and process guidance for incident response events.
• Monitor and investigate security events received through the SIEM or other security tools.
• Carry out Level 2 triage of incoming Incidents.
• Work directly with the Tier 3 Incident Commander and manage assigned investigations.
• Review, revise, and recommend technical, process, and physical controls.
• Develop and implement defensive cyber best practice tactics, techniques, and procedures.

Benefits

• Valiant pays 99% of the Medical, Dental, and Vision Coverage for Full-time Employees.
• Valiant contributes 25% towards Health Coverage for Family and Dependents.
• 100% Paid Short Term Disability and Life Insurance Policy for Full-time Employees.
• 100% Paid Certifications.
• 401K Matching up to 4%.
• Paid Time Off.
• Paid Federal Holidays.
• Wellness & Fitness Program.
• Valiant University – Online Education and Training Portal.
• FSA programs for: Medical Costs, Dependent Care, Transit, and Parking.
• Referral Bonuses.