Cyber Analyst, Tier 2 / Incident Commander

Job not on LinkedIn

🔥 2 minutes ago

🇺🇸 United States – Remote

💵 $115k - $130k / year

⏰ Full Time

🟢 Junior

🟡 Mid-level

🧐 Analyst

👻 Ghost score 2%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Valiant Solutions

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2005

💼 Consulting

🎖️ Defense

🔒 Cybersecurity

Consulting • Defense • Cybersecurity

Valiant Solutions is a cybersecurity and IT services firm that specializes in securing the future by providing comprehensive and customized solutions to challenges faced by the Federal Government. With a focus on security engineering, operations, and strategic risk governance, the company addresses complex information security challenges through innovative application development and enterprise architecture. Recognized for its commitment to excellence, Valiant Solutions has been awarded numerous contracts and honors for its impactful contributions in the cybersecurity field.

📋 Description

• Man a 24x7x365 cybersecurity operations and coordination center • Manage escalated alerts, notifications, and communications • Execute core incident response activities, including tracking the lifecycle of events • Manage stakeholder communication and drive remediation and recovery actions • Ensure reports are accurately documented in the incident tracking system • Coordinate directly with reporting entities to gain a full understanding of each event • Follow established SOPs for escalation and notification of Federal Leadership • Support and develop reports during and after incidents, including actions taken to mitigate, recover, and return operations to normal • Lead and actively participate in security-related meetings and discussions with the client • Perform incident response analysis based on investigation requirements • Participate in remediation of incidents and responses generated from live threats against the enterprise • Record and report all incidents per Federal and department policy • Create and track network incidents and investigations through closure • Serve as key personnel for Incident Management, providing coordination, task assignment, and process guidance • Monitor and investigate security events received through the SIEM or other security tools • Carry out Level 2 triage of incoming incidents, including initial IR assessment, incident-nature determination, risk and damage assessment, and appropriate routing of security or privacy data requests • Work directly with the Tier 3 Incident Commander and manage assigned investigations • Assist Tier 1 and Tier 2 analysts as needed to resolve investigations • Review, revise, and recommend technical, process, and physical controls • Develop and implement defensive cyber best practice tactics, techniques, and procedures

🎯 Requirements

• Must be able to obtain and maintain a Public Trust • MUST HAVE one of the following ACTIVE certifications: CISSP, GCIH, Security X, CSAE, or CSIE • 7+ years of relevant work experience or a Bachelor’s Degree with 2+ years of relevant experience • US Citizenship and must be able to pass a background investigation (Public Trust – High Risk) • Excellent organizational, verbal, presentation/facilitation, and written communication skills • Comfortable presenting briefings to the client • Proficiency in the Incident Response Process and SOC operations • Good understanding of threat hunting • Good understanding of system log information and where to collect specific data/attributes as required for the Incident Event • Operational understanding of enterprise networking and security tools, including firewalls, Antivirus, HIDS, IDS/IPS, proxy, and WAF • Understanding of Windows and Unix/Linux systems’ operations • Experience performing log analysis and reporting • Experience creating and tracking investigations to resolution • Experience with endpoint security solutions, including Windows Defender, antivirus solutions, and EDR tools • Understanding of compliance or regulatory frameworks, including FISMA, NIST, and ISO • Solid understanding of application, authentication, and network security principles • Understanding of operating system hardening techniques • General knowledge of MITRE ATT&CK and Lockheed Cyber Kill Chain • Understanding of Computer Network Defense (CND) policies, procedures, and regulations • SIEM monitoring and analysis, analyzing network traffic, log analysis, prioritizing and differentiating between potential intrusion attempts and false alarms • Ability to work with or support senior leaders to understand risk factors and communicate effective mitigation strategies • Ability to work independently to address and resolve a security incident with minimal supervision

🏖️ Benefits

• Valiant pays 99% of the Medical, Dental, and Vision Coverage for Full-time Employees • Valiant contributes 25% towards Health Coverage for Family and Dependents • 100% Paid Short Term Disability and Life Insurance Policy for Full-time Employees • 100% Paid Certifications • 401K Matching up to 4% • Paid Time Off • Paid Federal Holidays • Wellness & Fitness Program • Valiant University – Online Education and Training Portal • FSA programs for: Medical Costs, Dependent Care, Transit, and Parking • Referral Bonuses • Work-life balance • Career development opportunities