Incident Commander, Tier 3

Job not on LinkedIn

🔥 1 minute ago

🇺🇸 United States – Remote

⏰ Full Time

🟠 Senior

🔴 Lead

👻 Ghost score 13%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Valiant Solutions

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2005

💼 Consulting

🎖️ Defense

🔒 Cybersecurity

Consulting • Defense • Cybersecurity

Valiant Solutions is a cybersecurity and IT services firm that specializes in securing the future by providing comprehensive and customized solutions to challenges faced by the Federal Government. With a focus on security engineering, operations, and strategic risk governance, the company addresses complex information security challenges through innovative application development and enterprise architecture. Recognized for its commitment to excellence, Valiant Solutions has been awarded numerous contracts and honors for its impactful contributions in the cybersecurity field.

📋 Description

• Conduct advanced incident response analysis to identify attack vectors, assess threats, and investigate malware, data exposure, phishing, social engineering, and other cybersecurity incidents • Coordinate incident containment, remediation, and recovery activities • Monitor and analyze security events and alerts from Splunk SIEM and other security tools • Review escalated alerts and perform Level 3 incident triage to determine incident type, severity, scope, risk, and response or escalation • Serve as the primary point of coordination for incident management during significant incidents, including data breaches and ransomware attacks • Assign response actions and coordinate stakeholders, enterprise teams, resources, and timelines • Create, maintain, and track incident records and ticket queues from detection through closure • Ensure accurate documentation and compliance with federal requirements, departmental policies, and applicable legislation • Evaluate and recommend technical, procedural, and physical security controls • Prepare incident status reports, executive briefings, and post-incident reports • Document findings, response actions, remediation, recovery, lessons learned, and restoration of normal operations • Collaborate with digital forensic investigators and application security analysts on investigations and threat hunting • Conduct or coordinate endpoint, network, and log analysis to identify indicators of compromise, determine incident scope, and support root-cause analysis • Lead a 24x7x365 incident coordination function and communicate incidents to Federal leadership

🎯 Requirements

• Must have an active CISSP certification from ISC2, plus GCIH or an equivalent relevant incident response, digital forensics, or cybersecurity certification • Minimum of 7 years of relevant professional experience, or a bachelor’s degree with at least 3 years of relevant experience • Must be a U.S. citizen • Must be able to complete a federal background investigation for a High-Risk Public Trust position, including applicable credit checks • Extensive experience managing cybersecurity incidents, advanced incident triage, response coordination, and investigations through resolution • Proficiency in SOC operations, threat hunting, intrusion detection and prevention, security event monitoring, and incident detection and response • Expert knowledge of TCP/IP protocols, network traffic analysis, IDS/IPS, and security log analysis • Experience with endpoint security, antivirus, EDR, host-based intrusion detection, firewalls, proxies, WAF, and enterprise security solutions, including FireEye products • Extensive experience analyzing and correlating security logs and collecting host, network, and cloud data • Strong understanding of Windows and Unix/Linux, enterprise networking, system and application security, systems and network administration, and OS hardening • Knowledge of digital forensic techniques, evidence collection, recovery, preservation, chain of custody, and forensic image acquisition • Understanding of cyberattack stages, adversary techniques, threat profiling, intrusion detection, and indicators of compromise • Experience creating and tracking incident investigations, preparing security alert notifications, maintaining incident records, and documenting response activities • Experience supporting or advising on FISMA, PCI DSS, GDPR, NIST, and ISO standards • Understanding of CND policies, procedures, standards, and regulatory requirements • Ability to coordinate incident response teams and communicate mitigation strategies to senior business leaders • Ability to communicate complex cybersecurity findings to technical and non-technical stakeholders during crises • Excellent written and verbal communication, presentation, facilitation, documentation, and organizational skills • Strong working knowledge of Splunk SIEM, Microsoft Defender EDR, Palo Alto Networks Cortex XSOAR, and digital forensic and incident response tools • Ability to work core business hours aligned with coworkers and clients • Must disclose current or future outside employment and obtain written approval

🏖️ Benefits

• Valiant pays 99% of Medical, Dental, and Vision Coverage for Full-time Employees • Valiant contributes 25% towards Health Coverage for Family and Dependents • 100% Paid Short Term Disability and Life Insurance Policy for Full-time Employees • 100% Paid Certifications • 401K Matching up to 4% • Paid Time Off • Paid Federal Holidays • Wellness & Fitness Program • Valiant University – Online Education and Training Portal • FSA programs for Medical Costs, Dependent Care, Transit, and Parking • Referral Bonuses • 100% remote work • Quiet, distraction-free remote workspace and adequate internet requirements • Cameras encouraged and may be required during virtual video conferences