Cybersecurity Incident Commander

Valiant Solutions

. Direct and manage multiple workstreams and resources during and after incident response and recovery engagements .

Posted 10/26/2026full-timeRemote • United StatesSeniorLead💰 $170,000 - $189,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in incident response management, cybersecurity, and IT risk management, with a strong focus on forensic investigation, technical recovery, and compliance with industry standards. Capable of leading teams, advising stakeholders on security risks, and developing effective incident response strategies.

Highest-signal resume keywords

Incident Response ManagementForensic InvestigationCybersecurity ComplianceSIEM Strategy DevelopmentLeadership Experience

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Incident ResponseForensic ImagingBreach ContainmentThreat HuntingLog AnalysisMalware AnalysisIncident TriageSecurity Operations PlaybooksTechnical RecoveryEvidence Recovery

Soft Skills

Communication SkillsOrganizational SkillsPresentation SkillsMentoring SkillsCollaboration Skills

Tools & Technologies

SIEMLogging and Monitoring ToolsIncident Response ToolsNetwork Security ToolsForensic Analysis Tools

Certifications & Qualifications

Top Secret ClearanceSCI Eligibility

Industry Keywords

FISMAPCIGDPRNISTISOCyber-Attack StagesComputer Network DefenseIntrusion DetectionData BreachesRansomware

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Direct and manage multiple workstreams and resources during and after incident response and recovery engagements
Coordinate incident response and project management in a matrixed triage environment
Perform or oversee forensic imaging and analysis, breach containment, and infrastructure recovery planning and execution
Produce after-action reports and analyses
Interface with external agency incident response functions, contractors, law firms, internal resources, and customer stakeholders
Collaborate with Security Operations and Security Engineering practice leaders on service offerings and third-party/client relationships
Advise stakeholders on business objectives, security risks, and mitigation strategies during incident response work
Participate in a rotating on-call schedule
Serve as incident response event point person and liaison to enterprise teams
Coordinate resources, activities, and timelines during security incidents such as data breaches and ransomware events
Work under the direction of the Security Operations lead
Conduct initial incident triage and make rapid decisions on appropriate actions
Support and develop reports during and after incidents
Review and recommend technical, process, and physical controls
Lead forensic investigators and application security analysts in reactive and proactive threat-hunting engagements
Perform endpoint, network, and log analysis
Mentor and develop junior forensic, response, and threat-hunting resources

Requirements

What you’ll need

Active Top Secret clearance with SCI eligibility
Minimum of 10+ years of experience within incident response, cybersecurity, and/or IT risk management
Bachelor's degree in Computer Science, Information Systems, Mathematics, Engineering, or related field, or an additional three years of relevant experience
Leadership experience and confidence with incident response management
Experience with technical recovery, legal or compliance notifications, incident response plan development, forensic investigation, and tabletop testing
Advisory experience with FISMA, PCI, GDPR, NIST, and ISO frameworks
Experience owning incident response processes including detection, validation, containment, remediation, and communication
Experience driving SIEM strategy, tuning, log correlation, incident response integration, and metrics reporting
Experience responding to critical security incidents and leading escalation teams
Experience creating, maintaining, and promoting security operations playbooks
Experience managing logging and monitoring states and driving prioritized improvement roadmaps
Experience as an Information Security and Risk consultant
Understanding of application, database, authentication, and network security principles
Knowledge of network services, protocols, evidence recovery, log analytics, incident categories, intrusion detection, and packet analysis
Understanding of system/application security, systems and network administration, and operating system hardening
Knowledge of cyber-attack stages, profiling, and host/network intrusion detection
Evidence recovery and preservation of forensic integrity
Ability to perform or direct malware analysis, threat hunting, and incident response
Understanding of Computer Network Defense policies, procedures, and regulations
Ability to communicate complex security concepts to technical and non-technical audiences
Ability to work with senior business leaders to identify risks and mitigation strategies
Excellent organizational, verbal, presentation/facilitation, and written communication skills
US work authorization
Ability to pass a federal background check and credit check

Benefits

Comp & perks

Choice of medical plans, including HSA and PPO options, with company contributions
Dental and vision coverage for employees and families
Company-paid life, short-term disability, and long-term disability insurance
Optional supplemental life, accident, and critical illness coverage
401(k) retirement plan with company match
Paid time off that grows with years of service
Paid federal holidays
Paid certifications and professional development
Valiant University training portal
Flexible spending accounts
Wellness and fitness program
Referral bonuses
Flexible 100% remote work