Jobs at Valiant Solutions

The SOC Manager leads 24x7x365 Security Operations Center activities, including Tier 1–3 analyst teams, incident response, alert triage, containment, eradication, recovery, and advanced forensics. The role manages SIEM dashboards, SOAR playbooks, SOC documentation, schedules, call trees, performance metrics, and compliance with NIST SP 800-61. Responsibilities also include post-incident reviews, threat intelligence coordination, analyst training, governance participation, and cross-team leadership during high-severity incidents.

Supports and maintains WAN/LAN environments across multiple networks and security domains. Installs, monitors, troubleshoots, and optimizes network hardware, software, satellite communications, and IP services. Develops network architecture diagrams, road maps, test plans, and upgrade documentation; evaluates emerging technologies; performs site surveys; and ensures compliance with customer and government security policies. The role requires active Top Secret clearance and onsite work in Springfield, Virginia.

Performs incident response and digital forensics across enterprise and cloud environments. Responsibilities include real-time incident management, malware and memory analysis, evidence preservation, network and filesystem analysis, technical reporting, threat hunting, detection-rule development, security monitoring enhancement, customer assessments, tabletop exercises, and lessons learned. The role also maintains forensic laboratories, develops security procedures, supports SOC leadership, and participates in rotating on-call coverage.

The Business Analyst gathers and documents requirements, analyzes business processes and data, develops functional specifications and business cases, and recommends improvements. The role facilitates stakeholder workshops, collaborates with developers and project managers, supports project planning and reporting, conducts user acceptance testing, creates training materials, and helps ensure information systems meet business, accessibility, security, and compliance needs.

The Senior Archer Engineer develops, implements, administers, and supports RSA Archer eGRC solutions. Responsibilities include custom Archer development, system administration, integrations through APIs, data imports and exports, reporting, user account management, troubleshooting, system availability, user training, and technical support. The role also applies NIST risk management and security control frameworks, collaborates with security and infrastructure teams, and participates in on-call support.

Provides security engineering and compliance expertise for FedRAMP Cloud Service Providers. Reviews cloud architectures, authorization packages, security controls, system security plans, assessment reports, vulnerability scans, and penetration tests. Leads architecture interviews, identifies technical and documentation gaps, advises government stakeholders on risk and compliance, supports continuous monitoring, and guides vendors on FedRAMP, NIST, FISMA, RMF, and agency requirements.

Leads agency business continuity, mission assurance, and readiness programs. Manages BPA/BIA cycles, continuity planning, risk assessments, compliance reporting, alternate-site operations, training, exercises, and requirements for continuity tools. Supervises Functional Analysts, coordinates cross-functional working groups, supports emergency relocation and devolution planning, and advises senior leadership on preparedness and mission risks.

Owns and governs cybersecurity systems architecture across cloud-native AWS GovCloud environments. Designs Zero Trust solutions, security controls, integration patterns, architecture blueprints, and engineering design documents. Leads integration of SIEM, SOAR, CDM, TDSP, EDR, identity platforms, and DevSecOps pipelines. Oversees cloud architecture, modernization, technical roadmaps, governance reviews, and collaboration with engineering and business stakeholders while ensuring compliance with federal security standards and FedRAMP requirements.

Administer and maintain enterprise SIEM and SOAR infrastructure, including Elastic and Splunk platforms. Manage security event data ingestion, detection rules, alerts, integrations, automation workflows, system health, performance, upgrades, and documentation. Analyze security events, support incident response, collaborate with CSSP teams, guide analysts, and recommend improvements. The role requires Linux administration, scripting, networking knowledge, threat detection expertise, and rotational after-hours support.

Provide systems engineering and cybersecurity services for Intelligence Community networks across multiple security domains and locations. Responsibilities include infrastructure design, Linux and Windows administration, network services, virtualization, cloud environments, SIEM technologies, cybersecurity troubleshooting, and root cause analysis. The role requires active Top Secret clearance, advanced systems engineering knowledge, and the ability to work independently in onsite locations.

Leads complex incident response, threat hunting, digital forensics, purple team exercises, and detection engineering within a CSSP environment. The analyst evaluates IDS/IPS signatures and log correlation rules, coordinates incident reporting, maintains SOPs aligned with CJCSM 6510.01B, mentors junior analysts, and supports 24/7 operations. The role is fully onsite in Charleston, South Carolina, requires an active Secret clearance, and may involve up to 10% OCONUS travel.

Designs, develops, tests, and maintains cloud cybersecurity detection capabilities, including IDS/IPS signatures, log correlation rules, and detection logic across AWS, Azure, GCP, Splunk, and Elastic. Analyzes threat intelligence, cloud logs, and indicators to improve threat identification and reduce false positives. Collaborates with watch analysts, reporting agencies, and subscriber sites, maintains SOPs, supports compliance, and participates in evaluations and incident response surges.

Monitors network and host-based systems in a CSSP environment, triages and validates suspicious activity, escalates incidents, supports incident response, correlates logs using Splunk, Elastic, and Sentinel, documents investigations, and assists with program reviews and tool evaluations. The role requires onsite shift work and may include surge support for incident response actions.

Leads cybersecurity GRC programs for government clients, overseeing contractor teams, task orders, project deliverables, compliance, security assessments, RMF sustainment, risk mitigation, schedules, budgets, SLAs, and performance metrics. The role requires technical program management, customer and stakeholder engagement, executive presentations, requirements gathering, reporting, and support for information security solutions across networks, systems, and applications.

Designs, implements, and maintains enterprise security solutions; operates EDR, SIEM, web application firewall, and vulnerability-scanning tools; advances Zero Trust maturity; integrates security into DevSecOps, CI/CD, and infrastructure-as-code processes; addresses vulnerabilities and security gaps; develops security performance dashboards; and validates system designs against requirements.

Develops and maintains high-fidelity detection rules, signatures, and risk-based alerting in Elastic Security. Analyzes threat intelligence, maps detections to MITRE ATT&CK, validates rules, reduces false positives, and collaborates with watch analysts on monitoring and incident response. Maintains detection documentation, supports compliance with DoD directives, coordinates with reporting agencies, and participates in evaluations. The role is fully onsite in Charleston, requires an active Secret clearance, and may involve up to 10% travel and overtime.