Incident Commander, Tier 3

Valiant Solutions

. Conduct advanced incident response analysis to identify attack vectors, assess threats, and investigate malware, data exposure, phishing, social engineering, and other cybersecurity incidents .

Posted 11/10/2026full-timeRemote • United StatesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in incident response analysis, threat assessment, and cybersecurity incident management, with a strong focus on compliance with federal regulations and effective communication with stakeholders. Proficient in coordinating incident containment and remediation efforts while leveraging advanced technical skills in security monitoring and analysis.

Highest-signal resume keywords

CISSP CertificationGCIH CertificationIncident Response ManagementSOC OperationsThreat Hunting

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Incident TriageMalware AnalysisSecurity Event MonitoringNetwork Traffic AnalysisDigital ForensicsTCP/IP ProtocolsEndpoint SecuritySecurity Log AnalysisOS HardeningIntrusion Detection and Prevention

Soft Skills

Excellent CommunicationOrganizational SkillsPresentation SkillsFacilitation SkillsDocumentation Skills

Tools & Technologies

Splunk SIEMFireEye ProductsEDRAntivirusWAFProxiesFirewallsIDS/IPSCloud Security SolutionsNetwork Security Solutions

Certifications & Qualifications

CISSPGCIH

Industry Keywords

FISMAPCI DSSGDPRNISTISO StandardsComputer Network DefenseCybersecurityIncident ManagementData BreachesRansomware

Tech Stack

Tools & technologies

CloudCyber SecurityFirewallsLinuxSplunkTCP/IPUnix

About the role

Key responsibilities & impact

Conduct advanced incident response analysis to identify attack vectors, assess threats, and investigate malware, data exposure, phishing, social engineering, and other cybersecurity incidents
Coordinate incident containment, remediation, and recovery activities
Monitor and analyze security events and alerts from Splunk SIEM and other security tools
Review escalated alerts and perform Level 3 incident triage to determine incident type, severity, scope, risk, and response or escalation
Serve as primary coordination point for incident management during significant incidents, including data breaches and ransomware attacks
Assign response actions and coordinate stakeholders, enterprise teams, resources, and timelines
Create, maintain, and track incident records and ticket queues from detection through closure
Ensure accurate documentation and compliance with federal requirements, departmental policies, and applicable legislation
Evaluate and recommend technical, procedural, and physical security controls
Prepare incident status reports, executive briefings, and post-incident reports
Document findings, response actions, remediation, recovery, lessons learned, and restoration of normal operations
Collaborate with digital forensic investigators and application security analysts on investigations and threat hunting
Conduct or coordinate endpoint, network, and log analysis to identify indicators of compromise, determine incident scope, and support root-cause analysis
Lead a 24x7x365 incident coordination function and communicate incidents to Federal leadership

Requirements

What you’ll need

U.S. citizenship required
Ability to successfully pass a federal background investigation for a High-Risk Public Trust position, including applicable credit checks
Must be able to obtain and maintain a Public Trust
Must hold active CISSP certification from ISC2, plus GCIH (GIAC Certified Incident Handler) or an equivalent relevant incident response, digital forensics, or cybersecurity certification
Minimum of 7 years of relevant professional experience, or a bachelor’s degree with at least 3 years of relevant experience
Extensive experience managing cybersecurity incidents, advanced incident triage, coordinating response activities, and driving investigations through resolution
Proficiency in SOC operations, threat hunting, intrusion detection and prevention, security event monitoring, and incident detection and response
Expert knowledge of TCP/IP protocols, network traffic analysis, IDS/IPS, and security log analysis
Experience with endpoint security, antivirus, EDR, host-based intrusion detection, firewalls, proxies, WAF, and enterprise security solutions, including FireEye products
Experience analyzing and correlating security logs and collecting host, network, and cloud data
Strong understanding of Windows and Unix/Linux operating systems, enterprise networking, system and application security, systems and network administration, and OS hardening
Knowledge of digital forensic techniques, including evidence collection, recovery, preservation, chain of custody, and forensic image acquisition
Understanding of cyberattack stages, adversary techniques, threat profiling, intrusion detection, and indicators of compromise
Experience creating and tracking incident investigations, preparing security alert notifications, maintaining incident records, and documenting response activities
Experience supporting or advising on FISMA, PCI DSS, GDPR, NIST, and ISO standards
Understanding of Computer Network Defense policies, procedures, standards, and regulatory requirements
Ability to coordinate incident response teams, work with senior business leaders, assess risks, and communicate mitigation strategies
Ability to communicate complex cybersecurity findings and recommended actions to technical and non-technical stakeholders during crises
Excellent written and verbal communication, presentation, facilitation, documentation, and organizational skills
Ability to manage multiple investigations and competing priorities simultaneously

Benefits

Comp & perks

A choice of medical plans, from an affordable HSA option to a full-featured PPO, with generous company contributions
Dental and vision coverage for you and your family
Company-paid life, short-term disability, and long-term disability insurance
Optional supplemental life, accident, and critical illness coverage
401(k) retirement plan with company match
Paid time off that grows with years of service
Paid federal holidays
Paid certifications
Professional development
Valiant University training portal
Flexible spending accounts
Wellness and fitness program
Referral bonuses
Remote work arrangement
Quiet, distraction-free workspace and adequate internet expectations for telecommuters