Cyber Analyst, Tier 2 – Incident Commander

Job not on LinkedIn

🔥 4 minutes ago

🇺🇸 United States – Remote

💵 $115k - $130k / year

⏰ Full Time

🟢 Junior

🟡 Mid-level

🧐 Analyst

👻 Ghost score 2%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Valiant Solutions

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2005

💼 Consulting

🎖️ Defense

🔒 Cybersecurity

Consulting • Defense • Cybersecurity

Valiant Solutions is a cybersecurity and IT services firm that specializes in securing the future by providing comprehensive and customized solutions to challenges faced by the Federal Government. With a focus on security engineering, operations, and strategic risk governance, the company addresses complex information security challenges through innovative application development and enterprise architecture. Recognized for its commitment to excellence, Valiant Solutions has been awarded numerous contracts and honors for its impactful contributions in the cybersecurity field.

📋 Description

• Man a 24x7x365 cybersecurity operations and coordination center • Manage escalated alerts, notifications, and communications • Execute incident response activities, including tracking event lifecycles, managing stakeholder communication, and driving remediation and recovery actions • Accurately document reports in the incident tracking system • Coordinate with reporting entities to understand each event • Follow established SOPs for escalation and notification of Federal Leadership • Support and develop reports during and after incidents, including mitigation, recovery, and return-to-normal actions • Lead and participate in security-related meetings and discussions with the client • Perform incident response analysis based on investigation requirements • Participate in remediation of incidents and responses generated by live enterprise threats • Record and report incidents according to Federal and department policy • Create and track network incidents and investigations through closure • Serve as key personnel for Incident Management by providing coordination, task assignment, and process guidance • Monitor and investigate security events received through the SIEM and other security tools • Carry out Level 2 triage of incoming incidents, including priority assessment, incident nature determination, risk and damage assessment, and appropriate routing • Work directly with the Tier 3 Incident Commander and manage assigned investigations • Assist Tier 1 and Tier 2 analysts in resolving investigations • Review, revise, and recommend technical, process, and physical controls • Develop and implement defensive cyber best-practice tactics, techniques, and procedures

🎯 Requirements

• Must be able to obtain and maintain a Public Trust • Must have one of the following active certifications: CISSP, GCIH, Security X, CSAE, or CSIE • 7+ years of relevant work experience or a Bachelor’s Degree with 2+ years of relevant experience • US Citizenship • Must be able to pass a background investigation (Public Trust – High Risk) • Excellent organizational, verbal, presentation/facilitation, and written communication skills • Comfortable presenting briefings to the client • Proficiency in the Incident Response Process and SOC operations • Understanding of threat hunting • Understanding of system log information and where to collect specific data/attributes for incident events • Operational understanding of enterprise networking and security tools, including firewalls, antivirus, HIDS, IDS/IPS, proxy, and WAF • Understanding of Windows and Unix/Linux systems’ operations • Experience performing log analysis and reporting • Experience creating and tracking investigations to resolution • Experience with endpoint security solutions, including Windows Defender, antivirus solutions, and EDR tools • Understanding of compliance or regulatory frameworks, including FISMA, NIST, and ISO • Solid understanding of application, authentication, and network security principles • Knowledge of operating system hardening techniques • General knowledge of MITRE ATT&CK and Lockheed Cyber Kill Chain • Understanding of Computer Network Defense policies, procedures, and regulations • SIEM monitoring and analysis • Ability to analyze network traffic, log analysis, and differentiate potential intrusion attempts from false alarms • Ability to support senior leaders in understanding risk factors and communicating mitigation strategies • Ability to work independently to address and resolve security incidents with minimal supervision

🏖️ Benefits

• Valiant pays 99% of the Medical, Dental, and Vision Coverage for Full-time Employees • Valiant contributes 25% towards Health Coverage for Family and Dependents • 100% Paid Short Term Disability and Life Insurance Policy for Full-time Employees • 100% Paid Certifications • 401K Matching up to 4% • Paid Time Off • Paid Federal Holidays • Wellness & Fitness Program • Valiant University – Online Education and Training Portal • FSA programs for: Medical Costs, Dependent Care, Transit, and Parking • Referral Bonuses • 100% remote work • Work-life balance • Career development opportunities