Incident Commander, Tier 3

Valiant Solutions

. Conduct advanced incident response analysis to identify attack vectors, assess threats, and investigate malware, data exposure, phishing, social engineering, and other cybersecurity incidents .

Posted 10/16/2026full-timeRemote • United StatesSeniorLeadWebsite

Tech Stack

Tools & technologies

CloudCyber SecurityFirewallsLinuxSplunkTCP/IPUnix

About the role

Key responsibilities & impact

Conduct advanced incident response analysis to identify attack vectors, assess threats, and investigate malware, data exposure, phishing, social engineering, and other cybersecurity incidents
Coordinate incident containment, remediation, and recovery activities
Monitor and analyze security events and alerts from Splunk SIEM and other security tools
Review escalated alerts and perform Level 3 incident triage to determine incident type, severity, scope, risk, and response or escalation
Serve as the primary point of coordination for incident management during significant incidents, including data breaches and ransomware attacks
Assign response actions and coordinate stakeholders, enterprise teams, resources, and timelines
Create, maintain, and track incident records and ticket queues from detection through closure
Ensure accurate documentation and compliance with federal requirements, departmental policies, and applicable legislation
Evaluate and recommend technical, procedural, and physical security controls
Prepare incident status reports, executive briefings, and post-incident reports
Document findings, response actions, remediation, recovery, lessons learned, and restoration of normal operations
Collaborate with digital forensic investigators and application security analysts on investigations and threat hunting
Conduct or coordinate endpoint, network, and log analysis to identify indicators of compromise, determine incident scope, and support root-cause analysis
Lead a 24x7x365 incident coordination function and communicate incidents to Federal leadership

Requirements

What you’ll need

Must have an active CISSP certification from ISC2, plus GCIH or an equivalent relevant incident response, digital forensics, or cybersecurity certification
Minimum of 7 years of relevant professional experience, or a bachelor’s degree with at least 3 years of relevant experience
Must be a U.S. citizen
Must be able to complete a federal background investigation for a High-Risk Public Trust position, including applicable credit checks
Extensive experience managing cybersecurity incidents, advanced incident triage, response coordination, and investigations through resolution
Proficiency in SOC operations, threat hunting, intrusion detection and prevention, security event monitoring, and incident detection and response
Expert knowledge of TCP/IP protocols, network traffic analysis, IDS/IPS, and security log analysis
Experience with endpoint security, antivirus, EDR, host-based intrusion detection, firewalls, proxies, WAF, and enterprise security solutions, including FireEye products
Extensive experience analyzing and correlating security logs and collecting host, network, and cloud data
Strong understanding of Windows and Unix/Linux, enterprise networking, system and application security, systems and network administration, and OS hardening
Knowledge of digital forensic techniques, evidence collection, recovery, preservation, chain of custody, and forensic image acquisition
Understanding of cyberattack stages, adversary techniques, threat profiling, intrusion detection, and indicators of compromise
Experience creating and tracking incident investigations, preparing security alert notifications, maintaining incident records, and documenting response activities
Experience supporting or advising on FISMA, PCI DSS, GDPR, NIST, and ISO standards
Understanding of CND policies, procedures, standards, and regulatory requirements
Ability to coordinate incident response teams and communicate mitigation strategies to senior business leaders
Ability to communicate complex cybersecurity findings to technical and non-technical stakeholders during crises
Excellent written and verbal communication, presentation, facilitation, documentation, and organizational skills
Strong working knowledge of Splunk SIEM, Microsoft Defender EDR, Palo Alto Networks Cortex XSOAR, and digital forensic and incident response tools
Ability to work core business hours aligned with coworkers and clients
Must disclose current or future outside employment and obtain written approval

Benefits

Comp & perks

Valiant pays 99% of Medical, Dental, and Vision Coverage for Full-time Employees
Valiant contributes 25% towards Health Coverage for Family and Dependents
100% Paid Short Term Disability and Life Insurance Policy for Full-time Employees
100% Paid Certifications
401K Matching up to 4%
Paid Time Off
Paid Federal Holidays
Wellness & Fitness Program
Valiant University – Online Education and Training Portal
FSA programs for Medical Costs, Dependent Care, Transit, and Parking
Referral Bonuses
100% remote work
Quiet, distraction-free remote workspace and adequate internet requirements
Cameras encouraged and may be required during virtual video conferences