Tier 3 DCO (Defensive Cyber Operations) Watch Analyst

Valiant Solutions; South Carolina; On-site; USD 80,000 - 120,000; Full time

Job summary

Valiant Solutions is seeking a Secret-cleared Tier 3 DCO Watch Analyst to join our innovative cybersecurity team. This role involves leading complex incident response efforts and conducting proactive threat hunting.

Candidates must have a Bachelor’s Degree in Cybersecurity or related fields, and 5 years of experience in a similar technical role. The position offers a chance to work with advanced detection capabilities in a collaborative environment.

Qualifications

• 5 years of experience supporting CSSP or similar SOC technical role.
• Comprehensive knowledge of CJCSM 6510.01B and incident response procedures.
• In-depth expertise with IDS/IPS solutions, including signature development and optimization.

Responsibilities

• Lead incident response efforts for significant incidents per CJCSM 6510.01B.
• Manage incident response campaigns and coordinate multi-team efforts.
• Conduct proactive threat hunting to identify advanced threats and vulnerabilities.
• Lead purple team exercises to evaluate detection and response capabilities.
• Perform advanced digital forensics on Windows and other operating systems.

Skills

Incident response procedures

Threat hunting

Digital forensics

IDS/IPS solutions

Operational leadership

Education

Bachelor's Degree in Cybersecurity or related field

Tools

IDS/IPS

Job description

Position Description

Valiant Solutions is seeking a Secret‑cleared Tier 3 DCO Watch Analyst to join our rapidly growing and innovative cybersecurity team. The Tier 3 DCO Watch Analyst leads complex incident response, conducts proactive threat hunting, and enhances detection capabilities within a Cybersecurity Service Provider (CSSP) environment. The analyst coordinates incident analysis with internal and external stakeholders, leads purple team exercises, and drives improvements to detection and response capabilities. The position requires advanced expertise, operational leadership, and strict compliance with CJCSM 6510.01B standards.

Location

Location: 100% onsite in Charleston, SC.

Clearance Required

Clearance Required: Active Secret.

Education Requirement

Education Requirement: Bachelor’s Degree in Cybersecurity, Computer, Electrical, or Electronics Engineering, or Mathematics with a concentration in computer science or equivalent.

Certification Required

Certification Required: DoD 8570 IAT Level II certification and CSSP/CND certification required.

Required Experience

• 5 years of experience supporting CSSP or similar SOC technical role.
• Comprehensive knowledge of CJCSM 6510.01B and incident response procedures.
• In depth expertise with IDS/IPS solutions, including signature development and optimization.
• Extensive experience performing digital forensics across multiple operating systems.

Responsibilities

• Lead incident response efforts, including analysis, mitigation, and reporting of significant incidents per CJCSM 6510.01B.
• Manage incident response campaigns by developing strategies, coordinating multi-team efforts, and ensuring comprehensive resolution and reporting.
• Conduct proactive threat hunting to identify advanced threats and network vulnerabilities.
• Lead purple team exercises in collaboration with red and blue teams to evaluate and enhance detection and response capabilities.
• Evaluate and refine detection mechanisms, including IDS/IPS signatures and log correlation rules, to improve accuracy and reduce false positives.
• Perform advanced network and host-based digital forensics on Windows and other operating systems to support investigations.
• Coordinate with reporting agencies and subscriber sites for comprehensive incident analysis and reporting.
• Develop and maintain internal SOP documentation, ensuring alignment with CJCSM 6510.01B and applicable directives.
• Work with a team to provide 24/7 support for incident response, including non-core hours, and mentor junior analysts.
• Participate in program reviews, product evaluations, and onsite certification assessments.
• Work four 10-hour shifts (Sunday-Wednesday or Wednesday Saturday); shift placement at management’s discretion.
• Surge support may be required to support incident response actions.
• Up to 10% travel may be required, to include OCONUS locations.

Equal Employment Opportunity

Valiant Solutions is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, disability, genetic information, marital status, or veteran status, in accordance with applicable law.

Physical Demands

Sitting or standing at a desk for prolonged periods of time and consistent operation of a computer. Frequent communication and exchanging of accurate information via electronic communication, phones, and in person. Occasionally lift and/or move moderate amounts of weight, typically less than 20 pounds. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of the job.

Authorization to Share Resume and Personal Information

By submitting your resume for this position, you authorize Valiant Solutions to share your resume, as well as personal information included on the resume, with its subsidiaries, affiliates and teaming partners for the purpose of considering you for this position and other available positions requiring comparable skills, education and experience. Should Valiant Solutions or its affiliates and teaming partners wish to initiate pre‑employment discussions, you will be asked to complete an employment application and related employment documents.