Cyber Analyst, Tier 2 – Incident Commander

Valiant Solutions

. Man a 24x7x365 cybersecurity operations and coordination center .

Posted 10/9/2026full-timeRemote • United StatesJuniorMid-Level💰 $115,000 - $130,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in incident response processes, cybersecurity operations, and threat hunting, with a strong ability to manage escalated alerts and coordinate communications effectively. Proficient in utilizing security tools and frameworks to analyze and mitigate security incidents while ensuring compliance with regulatory standards.

Highest-signal resume keywords

Incident Response ProcessCISSP CertificationSIEM Monitoring and AnalysisThreat HuntingLog Analysis

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Incident ResponseLog AnalysisNetwork Security PrinciplesEndpoint Security SolutionsSystem Log InformationOperational Networking UnderstandingApplication SecurityNetwork Traffic AnalysisIncident TrackingSecurity Incident Remediation

Soft Skills

Organizational SkillsVerbal CommunicationWritten CommunicationPresentation SkillsFacilitation Skills

Tools & Technologies

SIEMFirewallsAntivirus SolutionsHIDSIDS/IPSProxyWAFWindows DefenderEDR ToolsIncident Tracking System

Certifications & Qualifications

CISSPGCIHSecurity XCSAECSIE

Industry Keywords

Cybersecurity OperationsFISMANISTISOMITRE ATT&CKLockheed Cyber Kill ChainComputer Network DefensePublic TrustBackground InvestigationRegulatory Compliance

Tech Stack

Tools & technologies

Cyber SecurityFirewallsLinuxUnix

About the role

Key responsibilities & impact

Man a 24x7x365 cybersecurity operations and coordination center
Manage escalated alerts, notifications, and communications
Execute incident response activities, including tracking event lifecycles, managing stakeholder communication, and driving remediation and recovery actions
Accurately document reports in the incident tracking system
Coordinate with reporting entities to understand each event
Follow established SOPs for escalation and notification of Federal Leadership
Support and develop reports during and after incidents, including mitigation, recovery, and return-to-normal actions
Lead and participate in security-related meetings and discussions with the client
Perform incident response analysis based on investigation requirements
Participate in remediation of incidents and responses generated by live enterprise threats
Record and report incidents according to Federal and department policy
Create and track network incidents and investigations through closure
Serve as key personnel for Incident Management by providing coordination, task assignment, and process guidance
Monitor and investigate security events received through the SIEM and other security tools
Carry out Level 2 triage of incoming incidents, including priority assessment, incident nature determination, risk and damage assessment, and appropriate routing
Work directly with the Tier 3 Incident Commander and manage assigned investigations
Assist Tier 1 and Tier 2 analysts in resolving investigations
Review, revise, and recommend technical, process, and physical controls
Develop and implement defensive cyber best-practice tactics, techniques, and procedures

Requirements

What you’ll need

Must be able to obtain and maintain a Public Trust
Must have one of the following active certifications: CISSP, GCIH, Security X, CSAE, or CSIE
7+ years of relevant work experience or a Bachelor’s Degree with 2+ years of relevant experience
US Citizenship
Must be able to pass a background investigation (Public Trust – High Risk)
Excellent organizational, verbal, presentation/facilitation, and written communication skills
Comfortable presenting briefings to the client
Proficiency in the Incident Response Process and SOC operations
Understanding of threat hunting
Understanding of system log information and where to collect specific data/attributes for incident events
Operational understanding of enterprise networking and security tools, including firewalls, antivirus, HIDS, IDS/IPS, proxy, and WAF
Understanding of Windows and Unix/Linux systems’ operations
Experience performing log analysis and reporting
Experience creating and tracking investigations to resolution
Experience with endpoint security solutions, including Windows Defender, antivirus solutions, and EDR tools
Understanding of compliance or regulatory frameworks, including FISMA, NIST, and ISO
Solid understanding of application, authentication, and network security principles
Knowledge of operating system hardening techniques
General knowledge of MITRE ATT&CK and Lockheed Cyber Kill Chain
Understanding of Computer Network Defense policies, procedures, and regulations
SIEM monitoring and analysis
Ability to analyze network traffic, log analysis, and differentiate potential intrusion attempts from false alarms
Ability to support senior leaders in understanding risk factors and communicating mitigation strategies
Ability to work independently to address and resolve security incidents with minimal supervision

Benefits

Comp & perks

Valiant pays 99% of the Medical, Dental, and Vision Coverage for Full-time Employees
Valiant contributes 25% towards Health Coverage for Family and Dependents
100% Paid Short Term Disability and Life Insurance Policy for Full-time Employees
100% Paid Certifications
401K Matching up to 4%
Paid Time Off
Paid Federal Holidays
Wellness & Fitness Program
Valiant University – Online Education and Training Portal
FSA programs for: Medical Costs, Dependent Care, Transit, and Parking
Referral Bonuses
100% remote work
Work-life balance
Career development opportunities