SOC Analyst

Valiant Solutions

. Provide Tier III support for SIEM alert triage, in-depth forensic analysis, and escalation .

Posted 9/23/2026full-timeRemote • United StatesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in Security Operations Center functions, including Tier III support, malware reverse engineering, and incident response. Proficient in utilizing SIEM, SOAR, and EDR tools for threat detection and analysis, while maintaining strong communication and mentoring skills.

Highest-signal resume keywords

SIEM Platform ExperienceMalware Reverse EngineeringIncident Response ReportingSecurity Clearance (Public Trust)Networking Knowledge (TCP/IP, DNS)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Malware Reverse EngineeringMemory ForensicsNetwork ForensicsIncident ReportingAlert TuningCorrelation Rule ReviewEDR Agent InvestigationPlaybook AutomationCloudTrail MonitoringPacket Capture Analysis

Soft Skills

Strong Written CommunicationStrong Verbal CommunicationMentoring SkillsLeadership

Tools & Technologies

SIEMSOAREDRNDRAWSCloudWatchGuardDutyVPC Flow LogsMITRE ATT&CKNIST SP 800-61

Certifications & Qualifications

GCIHGCIACEHSecurity+GCFAGCFEGNFAGREM

Industry Keywords

Security Operations CenterIncident ResponseThreat DetectionForensic AnalysisCybersecurity

Tech Stack

Tools & technologies

AWSCloudDNSLinuxTCP/IP

About the role

Key responsibilities & impact

Provide Tier III support for SIEM alert triage, in-depth forensic analysis, and escalation
Perform malware reverse engineering, memory forensics, and campaign correlation across SOC and partner SOC environments
Serve as the shift escalation point for complex or high-severity events raised by Tier I and Tier II analysts
Analyze escalated events within 4 hours per contract SLA
Maintain situational awareness of SIEM, SOAR, EDR, NDR, and CDM tools and telemetry data flows
Alert the SOC Manager when tool health or coverage gaps put detection at risk
Lead shift handovers with written and verbal summaries of open incidents, active hunts, tuning changes, and follow-up items
Contribute to SOC standard operating procedure and playbook updates
Support Red Team and Purple Team exercises by validating detection coverage and translating adversary tradecraft into detection rules
Support development and testing of custom detection rules
Collaborate with customer OCIO, OIG, and partner SOCs to strengthen strategic threat awareness
Contribute to monthly threat actor profiles and update detection signatures
Submit initial incident reports within one hour of confirmation
Support final incident reports within 72 hours, including impact, timeline, and remediation
Participate in post-incident lessons-learned sessions
Translate findings into playbooks, runbooks, and detection improvements
Mentor Tier I and Tier II analysts on triage technique, log analysis, and escalation quality

Requirements

What you’ll need

U.S. Citizenship is required due to federal contract obligations
Ability to successfully pass a federal background investigation
Six or more years of Security Operations Center experience, with demonstrated time in a Tier II or Tier III analyst role
At least one of the following certifications: GCIH, GCIA, CEH, or Security+
Hands-on experience with SIEM platforms and endpoint telemetry, including alert tuning, correlation rule review, and use of EDR agents for investigation
Working knowledge of Windows and Linux internals, event and audit logs, process and memory artifacts
Working knowledge of networking: TCP/IP, DNS, HTTP/S, common protocols, and packet capture analysis
Experience with AWS native capabilities and telemetry, including CloudTrail, GuardDuty, VPC Flow Logs, and CloudWatch, in a monitoring or investigation context
Ability to lead a shift and drive handover discipline across analyst tiers
Strong written and verbal communication skills, including the ability to write clear incident write-ups and shift handover notes
Required to obtain and maintain a Non-Sensitive / High Risk (Public Trust) security clearance, Tier 4/6c
Additional certifications such as GCFA, GCFE, GNFA, or GREM are preferred
Experience with malware reverse engineering, memory forensics, and network forensics is preferred
Familiarity with MITRE ATT&CK is preferred
Working knowledge of NIST SP 800-61 Rev. 2, NIST SP 800-86, and NIST SP 800-137 is preferred
Experience with SOAR platforms and playbook automation is preferred
Familiarity with AWS GovCloud and hybrid cloud detection patterns is preferred
Quiet, distraction-free workspace with adequate internet for telework
Full attention and availability during working hours
Schedule aligned with core business hours of coworkers and clients
Must disclose current or future outside employment and obtain written approval

Benefits

Comp & perks

Valiant pays 99% of the Medical, Dental, and Vision Coverage for Full-time Employees
Valiant contributes 25% towards Health Coverage for Family and Dependents
100% Paid Short Term Disability and Life Insurance Policy for Full-time Employees
100% Paid Certifications
401K Matching up to 4%
Paid Time Off
Paid Federal Holidays
Wellness & Fitness Program
Valiant University – Online Education and Training Portal
FSA programs for: Medical Costs, Dependent Care, Transit, and Parking
Referral Bonuses
100% telework / remote work
Career development opportunities
Work-life balance