Cybersecurity Incident Commander

🔥 4 minutes ago

🇺🇸 United States – Remote

💵 $170k - $189k / year

⏰ Full Time

🟠 Senior

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 3%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Valiant Solutions

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2005

💼 Consulting

🎖️ Defense

🔒 Cybersecurity

Consulting • Defense • Cybersecurity

Valiant Solutions is a cybersecurity and IT services firm that specializes in securing the future by providing comprehensive and customized solutions to challenges faced by the Federal Government. With a focus on security engineering, operations, and strategic risk governance, the company addresses complex information security challenges through innovative application development and enterprise architecture. Recognized for its commitment to excellence, Valiant Solutions has been awarded numerous contracts and honors for its impactful contributions in the cybersecurity field.

📋 Description

• Direct and manage multiple workstreams and resources during and after incident response and recovery engagements • Coordinate incident response and project management in a matrixed triage environment • Perform or oversee forensic imaging and analysis, breach containment, and infrastructure recovery planning and execution • Produce after-action reports and analyses • Interface with external agency incident response functions, contractors, law firms, internal resources, and customer stakeholders • Collaborate with Security Operations and Security Engineering practice leaders on service offerings and third-party/client relationships • Advise stakeholders on business objectives, security risks, and mitigation strategies during incident response work • Participate in a rotating on-call schedule • Serve as incident response event point person and liaison to enterprise teams • Coordinate resources, activities, and timelines during security incidents such as data breaches and ransomware events • Work under the direction of the Security Operations lead • Conduct initial incident triage and make rapid decisions on appropriate actions • Support and develop reports during and after incidents • Review and recommend technical, process, and physical controls • Lead forensic investigators and application security analysts in reactive and proactive threat-hunting engagements • Perform endpoint, network, and log analysis • Mentor and develop junior forensic, response, and threat-hunting resources

🎯 Requirements

• Active Top Secret clearance with SCI eligibility • Minimum of 10+ years of experience within incident response, cybersecurity, and/or IT risk management • Bachelor's degree in Computer Science, Information Systems, Mathematics, Engineering, or related field, or an additional three years of relevant experience • Leadership experience and confidence with incident response management • Experience with technical recovery, legal or compliance notifications, incident response plan development, forensic investigation, and tabletop testing • Advisory experience with FISMA, PCI, GDPR, NIST, and ISO frameworks • Experience owning incident response processes including detection, validation, containment, remediation, and communication • Experience driving SIEM strategy, tuning, log correlation, incident response integration, and metrics reporting • Experience responding to critical security incidents and leading escalation teams • Experience creating, maintaining, and promoting security operations playbooks • Experience managing logging and monitoring states and driving prioritized improvement roadmaps • Experience as an Information Security and Risk consultant • Understanding of application, database, authentication, and network security principles • Knowledge of network services, protocols, evidence recovery, log analytics, incident categories, intrusion detection, and packet analysis • Understanding of system/application security, systems and network administration, and operating system hardening • Knowledge of cyber-attack stages, profiling, and host/network intrusion detection • Evidence recovery and preservation of forensic integrity • Ability to perform or direct malware analysis, threat hunting, and incident response • Understanding of Computer Network Defense policies, procedures, and regulations • Ability to communicate complex security concepts to technical and non-technical audiences • Ability to work with senior business leaders to identify risks and mitigation strategies • Excellent organizational, verbal, presentation/facilitation, and written communication skills • US work authorization • Ability to pass a federal background check and credit check

🏖️ Benefits

• Choice of medical plans, including HSA and PPO options, with company contributions • Dental and vision coverage for employees and families • Company-paid life, short-term disability, and long-term disability insurance • Optional supplemental life, accident, and critical illness coverage • 401(k) retirement plan with company match • Paid time off that grows with years of service • Paid federal holidays • Paid certifications and professional development • Valiant University training portal • Flexible spending accounts • Wellness and fitness program • Referral bonuses • Flexible 100% remote work