Position Description

The Senior Cyber Threat Analyst is responsible for monitoring and analyzing security events to identify potential threats and vulnerabilities within the organization's infrastructure. They utilize advanced threat intelligence sources, security tools, and techniques to detect and investigate security incidents, assess the impact, and recommend appropriate mitigation strategies. Additionally, they collaborate with cross-functional teams to develop and implement proactive measures to enhance the organization's security posture and minimize risk exposure.

Location: Ideally in the Washington DC Metro area, but other locations can be considered. This position allows for 100% remote work. Remote work requires a high level of trust in our employees, and we strictly adhere to the details outlined in our Remote Work Policy below.

Work Schedule: Available shifts are Monday through Friday, either 6am to 2pm ET or 12pm to 8pm ET. There is a possibility that a 9am to 5pm schedule may become available, but this has not yet been confirmed.

Required Experience:

• US Citizenship and the ability to obtain a federal clearance, up to a Top Secret clearance.

• A minimum of 3 years of direct experience providing threat hunt support, including performing log and event review and incident response.
• At least one of the following or equivalent IT certifications: CEH (Certified Ethical Hacker), GSEC (GIAC Security Essentials), GCIH (GIAC Certified Incident Handler), Security+
• Experience leveraging KQL (or similar query language) in support of threat hunt duties.
• Experience leveraging SIEM, SOAR, and other tools to identify threat activity and incidents.
• Experience in providing threat hunt support with accuracy for effective resolution and documentation purposes.
• Experience in supporting multiple cybersecurity incidents simultaneously.
• Experience in adapting easily to learning new technologies.
• Ability to follow written and verbal instructions.
• Experience with problem-solving new incidents without knowledge of articles.
• Experience with creating and editing SOP and incident reports.
• Excellent communication skills, with the ability to articulate technical findings and recommendations to both technical and non-technical stakeholders, including senior management.

Preferred Education and Experience:

• BS in Computer Science, Information Systems, Mathematics, Engineering, or a related field is preferred, but not required.
• Proficiency with M365 Defender and Azure Sentinel.
• Experience with Microsoft Threat Intelligence and Google Threat Intelligence (Previously Mandiant Advantage Threat Intelligence) Platforms

Responsibilities:

• Develop and execute strategic plans for proactive threat-hunting initiatives to identify and mitigate potential security threats before they escalate.
• Collaborate with cross-functional teams, including SOC (Security Operations Center) analysts, incident responders, and threat intelligence analysts, to prioritize and investigate potential threats.
• Conduct in-depth analysis of security logs, network traffic, and endpoint data to identify anomalous behavior and indicators of compromise (IOCs).
• Perform Threat Hunting guided by, but not limited to Threat Modeling and Categories such as: Advanced Persistent Threats, Uncategorized Threat Actors, Hypothesis, TTP, Anomaly, Tools, and IOCs.
• Analyze security incidents to identify indicators of compromise (IOCs), attack vectors, and potential threats to the organization's assets and data.
• Investigate and triage security alerts to determine the severity, impact, and root cause of security incidents.
• Utilize advanced threat-hunting techniques and tools to proactively search for and identify emerging threats and vulnerabilities within the organization's infrastructure.
• Develop, test and validate detection engineering automation in order to combat threats, emergent risks and vulnerabilities in order to enhance SOC detections and response times
• Develop and maintain threat-hunting playbooks, methodologies, and standard operating procedures (SOPs) to streamline and enhance the effectiveness of threat-hunting activities.
• Stay abreast of the latest cyber threats, attack techniques, and industry best practices to continually improve threat-hunting capabilities.
• Provide regular reports and updates to senior management on the findings, insights, and recommendations resulting from threat-hunting activities.
• Drive continuous improvement initiatives to optimize threat-hunting processes, tools, and techniques based on lessons learned and industry trends.

Benefits Snapshot (includes, but not limited to)
Valiant pays 99% of the Medical, Dental, and Vision Coverage for Full-time Employees
Valiant contributes 25% towards Health Coverage for Family and Dependents
100% Paid Short Term Disability and Life Insurance Policy for Full-time Employees
100% Paid Certifications
401K Matching up to 4%
Paid Time Off
Paid Federal Holidays
Wellness & Fitness Program
Valiant University - Online Education and Training Portal
FSA programs for: Medical Costs, Dependent Care, Transit, and Parking
Referral Bonuses

The salary range for this position is a general guideline and not a guarantee of compensation or salary. It has been benchmarked in relation to the scope of the role, market rate, and internal equity. The salary for this role is expected to be in the $120,000 - $140,000 range. Where a candidate falls within the band can be determined based on one or more of the following: skillset, experience level, achievements, education, geographic location, security clearance, involvement in corporate tasks, and other non-discriminatory factors. In addition to the base salary, this role will include benefits as described above. Valiant reserves the right to adjust the salary range, experience requirements, and position responsibilities at any time without prior notice.

Remote Work Policy

Remote work necessitates a high level of trust in our employees. To ensure that employee performance does not suffer in a remote work environment, all employees who telecommute are expected to have a quiet and distraction-free workspace with adequate internet, dedicate their full attention and availability to their job duties during working hours, and maintain a schedule during core business hours that align with those of their coworkers and Valiant's clients. In alignment with Valiant's inclusive and engaging environment, cameras are encouraged and can be required to be on during virtual video conferences. Additionally, in alignment with the Office of the Inspector General's effort to eliminate conflicting employment, all Valiant employees are required to disclose any current or future outside employment engagements. During onboarding and throughout employment, employees must disclose any current activities or intent to engage in outside employment or other professional activities and obtain written approval. Employees may not solicit or conduct any outside business during core business hours for Valiant Solutions and our clients.

Physical Demands

Sitting or standing at a desk for prolonged periods of time and consistent operation of a computer. Frequent communication and exchanging of accurate information via electronic communication, phones, and in person. Occasionally lift and/or move moderate amounts of weight, typically less than 20 pounds. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of the job.

Authorization to Share Resume and Personal Information

By submitting your resume for this position, you authorize Valiant Solutions to share your resume, as well as, personal information included on the resume, with its subsidiaries, affiliates and teaming partners for the purpose of considering you for this position and other available positions requiring comparable skills, education and experience. Should Valiant Solutions or its affiliates and teaming partners wish to initiate pre-employment discussions, you will be asked to complete an employment application and related employment documents.

#LI-JM1