[Hiring] Cybersecurity Incident Commander @Valiant Solutions, LLC

Role Description

Valiant Solutions is seeking a Cybersecurity Incident Commander to join our rapidly growing and innovative team!

The Cybersecurity Incident Commander will direct and manage multiple work streams and resources during/after Incident Response & Recovery engagements. You will be tasked with:

• Incident response coordination and project management in a matrixed triage environment
• Forensic imaging and analysis
• Breach containment
• Infrastructure recovery planning and execution
• After-action reporting and analysis

This role will often interface with multiple groups, including:

• External agency IR functions
• Third-party contracting companies
• External law firms
• Internal direct contract and third-party resources
• Customer resources (C-Suite, Legal, Compliance, Risk, Security, Cybersecurity, Auditing, Operations, IT, Call Centers, Communications, Public Relations)

Additionally, the Incident Commander will collaborate with Security Operations and Security Engineering practice leaders to:

• Evaluate the direction of our offerings
• Establish ongoing relationships with third parties and clients
• Work closely with stakeholders to understand business objectives and advise on security risks/mitigation strategies during incident response work

Qualifications

• Minimum of 10+ years of experience within the incident response, cybersecurity, and/or IT risk management arena
• Bachelor's degree in Computer Science, Information Systems, Mathematics, Engineering, or related degree or an additional three (3) years of relevant experience
• Leadership experience and high level of confidence with incident response management
• Advisory experience in compliance or regulatory frameworks (i.e., FISMA, PCI, GDPR, NIST, ISO)
• Experience owning the critical process steps with incident response
• Experience driving the strategy for Security Incident and Event Management (SIEM)
• Experience responding to critical security incidents and leading escalation teams
• Experience creating, maintaining, and promoting a set of security operation playbooks
• Experience managing the current state of logging and monitoring
• Experience acting as an Information Security & Risk consultant
• Solid understanding of application, database, authentication, and network security principles
• Understanding of system and application security, systems and network administration
• General cyber-attack stages and techniques for detecting host and network-based intrusions
• Ability to perform or direct malware analysis, Threat Hunting, and incident response
• Understanding of Computer Network Defense (CND) policies, procedures, and regulations
• Ability to convey complex technical security concepts to technical and non-technical audiences
• Excellent organizational, verbal, presentation/facilitation, and written communication skills

Requirements

• All candidates must have US work authorization and the ability to pass a federal background check and credit check

Preferred Qualifications

• CISSP, CISM, or equivalent cybersecurity certifications
• PMP
• At least 8 years of directly related experience in Information Security Threat Management
• Process management experience with incident response and SIEM
• Experience with and confidence to develop and socialize security operations playbooks
• Prior experience with Law Enforcement, Forensic / Incident Response Firms, Cyber Insurance providers, Breach Coaches and/or Law Firms

Responsibilities

• Participate in a rotating on-call; rotation is based on the number of team members
• Serve as the incident response event point person and liaison to enterprise teams
• Conduct initial incident triage and assess the effectiveness of various tactics/strategies
• Support/develop reports during and after incidents
• Review and recommend technical, process, and physical controls
• Lead forensic investigators and application security analysts in Threat-hunting engagements
• Mentor and grow junior resources to develop additional forensic, response, and threat-hunting capabilities

Benefits

• A choice of medical plans, from an affordable HSA option to a full-featured PPO, with generous company contributions
• Dental and vision coverage for you and your family
• Company-paid life, short-term disability, and long-term disability insurance
• Optional supplemental life, accident, and critical illness coverage
• 401(k) retirement plan with company match
• Paid time off that grows with your years of service, plus paid federal holidays
• Paid certifications, professional development, and the Valiant University training portal
• Flexible spending accounts and a wellness and fitness program
• Referral bonuses when you help us bring great people to Valiant