Tier 3 DCO Senior Analyst / Threat Hunter (Malware)

Position Description

Tier 3 DCO Senior Analyst / Threat Hunter (Malware) is responsible for leading complex incident response, conducting proactive threat hunting, and enhancing detection capabilities within a Cybersecurity Service Provider (CSSP) environment. The analyst oversees incident analysis, coordinates with internal and external stakeholders, leads purple team exercises, and drives improvements to detection and response capabilities. This position requires advanced expertise, operational leadership, and strict compliance with CJCSM 6510.01B standards.

Location: This position is 100% onsite in Charleston, SC.

Clearance Required: Active Secret

Education Requirement: Bachelor's Degree in Cybersecurity, Computer, Electrical, or Electronics Engineering, OR Mathematics with a concentration in computer science or equivalent

Certification Required: DoD 8570 IAT Level II and DoD 8140 CSSP-specific certification

Required Experience:

• 5 years experience supporting CSSP or similar SOC technical role.
• Comprehensive knowledge of CJCSM 6510.01B and incident response procedures.
• In depth expertise with IDS/IPS solutions, including signature development and optimization.
• Extensive experience performing digital forensics across multiple operating systems.

Responsibilities:

• Lead incident response efforts, including analysis, mitigation, and reporting of significant incidents per CJCSM 6510.01B.
• Manage incident response campaigns by developing strategies, coordinating multi-team efforts, and ensuring comprehensive resolution and reporting.
• Conduct proactive threat hunting to identify advanced threats and network vulnerabilities.
• Lead purple team exercises in collaboration with red and blue teams to evaluate and enhance detection and response capabilities.
• Evaluate and refine detection mechanisms, including IDS/IPS signatures and log correlation rules, to improve accuracy and reduce false positives.
• Perform advanced network and host-based digital forensics on Windows and other operating systems to support investigations.
• Coordinate with reporting agencies and subscriber sites for comprehensive incident analysis and reporting.
• Develop and maintain internal SOP documentation, ensuring alignment with CJCSM 6510.01B and applicable directives.
• Work with a team to provide 24/7 support for incident response, including non-core hours, and mentor junior analysts.
• Participate in program reviews, product evaluations, and onsite certification assessments.
• Work four 10-hour shifts (Sunday-Wednesday or Wednesday Saturday); shift placement at management's discretion.
• Surge support may be required to support incident response actions.
• Up to 10% travel may be required, to include OCONUS locations.

Benefits Snapshot

Valiant takes care of the people who support our customers, with real choices in coverage and real investment in your career. Eligible full-time employees receive:

• A choice of medical plans, from an affordable HSA option to a full-featured PPO, with generous company contributions
• Dental and vision coverage for you and your family
• Company-paid life, short-term disability, and long-term disability insurance
• Optional supplemental life, accident, and critical illness coverage to round out your protection
• 401(k) retirement plan with company match
• Paid time off that grows with your years of service, plus paid federal holidays
• Paid certifications, professional development, and the Valiant University training portal
• Flexible spending accounts and a wellness and fitness program
• Referral bonuses when you help us bring great people to Valiant

Benefit eligibility and plan details are subject to the terms of each plan and may change from time to time.

The anticipated salary range for this position is $115,000 - $130,000. This range reflects Valiant Solutions' good-faith estimate of the base salary reasonably expected for this position upon hire, at the time of posting. The range has been established based on the scope of the role, market rates, and internal equity. Where a candidate falls within the posted range will depend on job-related factors, including relevant skills, experience, qualifications, achievements, education, geographic location, applicable security clearance requirements, additional corporate responsibilities, and other legitimate, non-discriminatory business considerations. The posted range does not guarantee an offer at any particular salary. In addition to base salary, this position includes the benefits described above.

Remote Work Policy (Remote and Hybrid Positions Only)

Remote work necessitates a high level of trust in our employees. To ensure that employee performance does not suffer in a remote work environment, all employees who telecommute are expected to have a quiet and distraction-free workspace with adequate internet, dedicate their full attention and availability to their job duties during working hours, and maintain a schedule during core business hours that aligns with those of their coworkers and Valiant's clients. In alignment with Valiant's inclusive and engaging environment, cameras are encouraged and can be required to be on during virtual video conferences. Additionally, in alignment with the Office of the Inspector General's effort to eliminate conflicting employment, all Valiant employees are required to disclose any current or future outside employment engagements. During onboarding and throughout employment, employees must disclose any current activities or intent to engage in outside employment or other professional activities and obtain written approval. Employees may not solicit or conduct any outside business during core business hours for Valiant Solutions and our clients.

Physical Demands

Sitting or standing at a desk for prolonged periods and consistently operating a computer. Frequent communication and exchanging of accurate information via electronic communication, phones, and in person. Occasionally lift and/or move moderate amounts of weight, typically less than 20 pounds. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of the job.

Authorization to Share Resume and Personal Information

By submitting your resume for this position, you authorize Valiant Solutions to share your resume, as well as personal information included on the resume, with its subsidiaries, affiliates, and teaming partners for the purpose of considering you for this position and other available positions requiring comparable skills, education, and experience. Should Valiant Solutions or its affiliates and teaming partners wish to initiate pre-employment discussions, you will be asked to complete an employment application and related employment documents.

#LI-BW1