Cyber Analyst, Tier 2 / Incident Commander

Valiant Solutions

. Man a 24x7x365 cybersecurity operations and coordination center .

Posted 10/9/2026full-timeRemote • United StatesJuniorMid-Level💰 $115,000 - $130,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Incident Response Management, including the ability to execute core incident response activities, manage escalated alerts, and coordinate with stakeholders. Proficient in utilizing security tools and frameworks to analyze and mitigate security incidents while ensuring compliance with federal policies.

Highest-signal resume keywords

Incident Response ProcessCISSP CertificationSIEM Monitoring and AnalysisThreat HuntingLog Analysis

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Incident Response ManagementLog AnalysisNetwork Security PrinciplesSystem Log InformationEndpoint Security SolutionsOperating System HardeningCybersecurity Best PracticesRisk and Damage AssessmentCompliance FrameworksSecurity Incident Investigation

Soft Skills

Organizational SkillsVerbal CommunicationWritten CommunicationPresentation SkillsFacilitation Skills

Tools & Technologies

SIEMFirewallsAntivirus SolutionsHIDSIDS/IPSWindows DefenderEDR ToolsProxyWAFNetwork Traffic Analysis

Certifications & Qualifications

CISSPGCIHSecurity XCSAECSIE

Industry Keywords

Cybersecurity OperationsIncident ManagementFederal ComplianceFISMANISTISOMITRE ATT&CKLockheed Cyber Kill ChainComputer Network DefensePublic Trust

Tech Stack

Tools & technologies

Cyber SecurityFirewallsLinuxUnix

About the role

Key responsibilities & impact

Man a 24x7x365 cybersecurity operations and coordination center
Manage escalated alerts, notifications, and communications
Execute core incident response activities, including tracking the lifecycle of events
Manage stakeholder communication and drive remediation and recovery actions
Ensure reports are accurately documented in the incident tracking system
Coordinate directly with reporting entities to gain a full understanding of each event
Follow established SOPs for escalation and notification of Federal Leadership
Support and develop reports during and after incidents, including actions taken to mitigate, recover, and return operations to normal
Lead and actively participate in security-related meetings and discussions with the client
Perform incident response analysis based on investigation requirements
Participate in remediation of incidents and responses generated from live threats against the enterprise
Record and report all incidents per Federal and department policy
Create and track network incidents and investigations through closure
Serve as key personnel for Incident Management, providing coordination, task assignment, and process guidance
Monitor and investigate security events received through the SIEM or other security tools
Carry out Level 2 triage of incoming incidents, including initial IR assessment, incident-nature determination, risk and damage assessment, and appropriate routing of security or privacy data requests
Work directly with the Tier 3 Incident Commander and manage assigned investigations
Assist Tier 1 and Tier 2 analysts as needed to resolve investigations
Review, revise, and recommend technical, process, and physical controls
Develop and implement defensive cyber best practice tactics, techniques, and procedures

Requirements

What you’ll need

Must be able to obtain and maintain a Public Trust
MUST HAVE one of the following ACTIVE certifications: CISSP, GCIH, Security X, CSAE, or CSIE
7+ years of relevant work experience or a Bachelor’s Degree with 2+ years of relevant experience
US Citizenship and must be able to pass a background investigation (Public Trust – High Risk)
Excellent organizational, verbal, presentation/facilitation, and written communication skills
Comfortable presenting briefings to the client
Proficiency in the Incident Response Process and SOC operations
Good understanding of threat hunting
Good understanding of system log information and where to collect specific data/attributes as required for the Incident Event
Operational understanding of enterprise networking and security tools, including firewalls, Antivirus, HIDS, IDS/IPS, proxy, and WAF
Understanding of Windows and Unix/Linux systems’ operations
Experience performing log analysis and reporting
Experience creating and tracking investigations to resolution
Experience with endpoint security solutions, including Windows Defender, antivirus solutions, and EDR tools
Understanding of compliance or regulatory frameworks, including FISMA, NIST, and ISO
Solid understanding of application, authentication, and network security principles
Understanding of operating system hardening techniques
General knowledge of MITRE ATT&CK and Lockheed Cyber Kill Chain
Understanding of Computer Network Defense (CND) policies, procedures, and regulations
SIEM monitoring and analysis, analyzing network traffic, log analysis, prioritizing and differentiating between potential intrusion attempts and false alarms
Ability to work with or support senior leaders to understand risk factors and communicate effective mitigation strategies
Ability to work independently to address and resolve a security incident with minimal supervision

Benefits

Comp & perks

Valiant pays 99% of the Medical, Dental, and Vision Coverage for Full-time Employees
Valiant contributes 25% towards Health Coverage for Family and Dependents
100% Paid Short Term Disability and Life Insurance Policy for Full-time Employees
100% Paid Certifications
401K Matching up to 4%
Paid Time Off
Paid Federal Holidays
Wellness & Fitness Program
Valiant University – Online Education and Training Portal
FSA programs for: Medical Costs, Dependent Care, Transit, and Parking
Referral Bonuses
Work-life balance
Career development opportunities