Valiant Solutions

• Provide strategic oversight and technical leadership for threat hunting, Cyber Threat Intelligence (CTI), and SOC analysts across Tier 1 through Tier 3 operations • Advise on threat modeling, adversary emulation, and Purple Team exercises • Lead development of threat detection frameworks and behavioral analytics • Direct hypothesis-driven and analytics-based hunt missions using EDR, NDR, and SIEM telemetry • Support inter-agency collaboration and national-level threat intelligence sharing • Correlate enriched IOCs and TTPs with internal telemetry • Build and maintain the Cyber Hunt knowledge base of IOCs and detection efficacy data • Produce monthly threat actor profiles, weekly threat briefings, and ad hoc alerts • Update Cyber Hunt standard operating procedures, playbooks, and runbooks • Mentor SOC analysts and junior hunters

• Lead a team that provides cybersecurity management for operational performance and compliance for all networks, systems and applications • Offer centralized management of Security Assessments (SA), ongoing assessments, new authorizations • Perform analysis to ensure security controls are consistently implemented • Integrate new technology with information security standards • Develop and execute plans for monitoring and assessing networks, systems and applications • Support sustainment of the Risk Management Framework (RMF) • Oversee contractor personnel and Task Order performance, including technical delivery and ideally P&L • Ensure the accomplishments of the program are documented and known for broader company efforts through whitepapers, briefing materials, and proposals • Execute with limited direction, anticipate customer needs and proactively support those needs

• Lead the architecture, deployment, upgrade, and sustainment of the SIEM environment supporting the client's SOC, including indexer and search head clusters, forwarders, and supporting infrastructure. • Monitor SIEM platform health, license usage, indexing latency, search performance, and ingest rates, and proactively address capacity, performance, and availability issues. • Onboard new data sources by defining requirements, configuring inputs and forwarders, building parsing and field extractions, and validating Common Information Model (CIM) compliance. • Develop, tune, and maintain correlation searches, notable events, dashboards, reports, and data models that support Tier 1 triage within fifteen minutes of detection and Tier 2 analysis within four hours of escalation. • Build and maintain SOC dashboards that provide real-time visibility into the client's security posture, supporting both day-to-day operations and executive reporting. • Translate detection requirements from threat hunters, CTI analysts, and engineering teams into production SIEM content mapped to the MITRE ATT&CK framework. • Integrate SIEM with SOAR, EDR, NDR, DLP, CDM, vulnerability management, and identity platforms to support automated triage, enrichment, and response. • Reduce false positive rates and alert fatigue by tuning correlation rules, refining thresholds, and applying risk-based alerting techniques. • Support incident response by building investigation queries, producing timeline reconstructions, preserving evidence, and contributing artifacts to initial incident reports within one hour of confirmation and final reports within seventy-two hours. • Author and maintain Engineering Design Documents, Standard Operating Procedures, runbooks, and configuration guides for the SIEM environment, and review them on the cadence required by the SOC CONOPS. • Partner with the Security Architect and engineering leads to align SIEM design with Zero Trust principles, the client's Technology Standards, and the agency's broader cybersecurity reference architecture. • Manage SIEM-related changes through the client's change control process, including impact assessments, back-out plans, and presentations to the Engineering Review Board and Change Control Board. • Provide knowledge transfer and informal training to SOC analysts, engineers, and system owners on SIEM usage, search development, and dashboard interpretation. • Apply secure configuration baselines, role-based access controls, and audit logging to the SIEM environment to meet federal compliance requirements. • Track and report on SIEM-related metrics, including ingest volume by source, detection coverage by MITRE technique, mean time to detect, and platform availability. • Stay current on SIEM product roadmap items, new applications and add-ons, and emerging detection techniques, and recommend improvements to the client's SIEM strategy.

• Manage and maintain the Unanet system for project accounting, invoicing, timekeeping, and expense reporting. • Develop and implement internal controls to safeguard company assets and ensure accurate financial reporting. • Prepare financial statements in accordance with GAAP and ensure timely month-end and year-end close processes. • Oversee and assist with the monthly close process, ensuring timely and accurate recording of financial transactions in the general ledger. • Monitor and reconcile balance sheet accounts, ensuring that all entries are in compliance with established accounting principles and government requirements. • Support the accounting team in ensuring proper accounting for all costs, including direct and indirect costs, and ensure correct allocation to government contracts. • Oversee accounts payable and accounts receivable • Monitor cash flow and manage banking relationships to ensure financial stability. • Ensure invoices comply with contract terms, funding limitations, and applicable government regulations. • Coordinate with Contracts and Program Management teams to validate billing data, labor charges, and contract modifications prior to invoice submission. • Assist in the development of the company’s annual budgets and forecasts. • Monitor and report on budget versus actual variances. • Assist in maintaining and improving internal controls to safeguard company assets and ensure compliance with accounting and regulatory standards. • Support external and internal audits by providing necessary documentation, working papers, and clarifications for auditors as needed. • Review and monitor contract costs to ensure the accurate application of labor, materials, and overhead charges.

• Provide engineering and technical expertise in PQC, PKI, and Automated Cryptographic Discovery and Inventory (ACDI) implementation. • Collaborate with stakeholders to define and refine PQC solution requirements. • Deliver analyses, recommendations, and staffing support to advance PQC program goals. • Develop engineering, implementation, and operations technical documents, schedules, and roadmaps. • Support modernization of cryptographic inventory management from manual to automated processes using COTS/GOTS ACDI tools. • Evaluate emerging technologies and provide recommendations to leadership. • Implement and operationalize the client's PQC technical solution in line with Department requirements. • Deploy ACDI capabilities to generate cryptographic inventories of quantum-vulnerable systems. • Conduct and document post-implementation evaluations to validate PQC solution effectiveness. • Securely integrate PQC and ACDI with existing Department services (CDM, VM, Zero Trust, etc.). • Prototype and test NIST-approved PQC algorithms and discovery tools. • Install and configure hardware/software replacements and upgrades for PQC transition. • Provide operations and maintenance (O&M) of the PQC solution (COTS, GOTS, SaaS). • Monitor solution health, performance, and availability; manage patching, upgrades, and optimization. • Maintain accurate solution inventories, secure configuration baselines, and user account validation. • Develop operational documentation including SOPs, playbooks, checklists, and user guides. • Provide after-hours technical support for planned and emergency maintenance. • Collaborate with SOC and other technical teams on incident response, process optimization, and integration. • Support PQC compliance with FISMA, NIST, and federal cybersecurity mandates. • Drive Risk Management Framework (RMF) activities, including POA&M management and A&A processes. • Prepare and maintain system security documentation (SSP, IRP, DRP, BIA, CP, etc.). • Support audits by providing evidence, coordination, tracking, and corrective actions. • Ensure ongoing risk management, continuous monitoring, and compliance with privacy and records management requirements.

• Business Development, Capture and Pre-RFP Solutioning Support BD meetings and pre-RFP shaping for federal civilian and DoD opportunities, positioning Valiant to win new business. • Technical Solution Architecture Lead end-to-end solution architecture for opportunities in cybersecurity, cloud, data, enterprise operations, and SOC modernization. • Prepare, lead, and write technical sections for RFIs/RFPs, ensuring clarity, compliance, and readability for technical and non-technical reviewers. • Engage with multiple Valiant programs to understand existing capabilities and infuse lessons learned into future solutioning efforts.

• Designing and implementing endpoint security solutions in cloud and on premise data centers • Installation/Configuration, patching and tuning IDS/IPS signatures, create and amend policies • Monitor events and trends using Kibana • Provide support for internal and external customers in a large enterprise environment • Troubleshoot a range of IT security and connectivity issues • Support other team members in troubleshooting and project efforts • Manage hardware and software inventories • Works with remote teams to install, maintain and troubleshoot security hardware • Administer applications running on Linux and UNIX systems in virtualized and cloud environments • Participate in a rotating on-call schedule; every 6-8 weeks for a period of one week at a time

• Own the entire BD lifecycle, from opportunity identification and teaming strategies through proposal submission, ensuring Valiant's growth within the Defense and Intelligence markets. • Actively participate in critical decisions throughout and tactical tasks needed to complete the capture. • Use your established network and continuously build new ones within the DoD/Intel community. • Gain an understanding of Valiant’s value proposition to technical and other decision-makers and industry partners, showcasing our solutions effectively. • Create and drive effective strategies to identify, qualify, and win large, full and open contracts. • Work closely with proposal, capture, and technical teams, as well as partners and subcontractors, to develop tailored solutions that meet customer needs. • Lead capture teams and contribute to winning proposal strategies and execution. • Perform both strategic and tactical activities to drive success, including direct contributions to content development and customer engagement. • Provide insights of industry trends, competitive landscape, and government priorities to influence Valiant’s positioning. • Quickly generate new business opportunities and influence long-term growth strategies in the DoD/Intel sector. • Attend industry events, conferences, and meetings to build connections and uncover new opportunities. • Demonstrate measurable impact within the first 6 months, including establishing meetings with key stakeholders, advancing capture opportunities, and contributing to proposal wins.

• Perform detailed architecture and technical design reviews on the full stack for vendor solutions • Conduct architecture reviews of Cloud Service Providers (CSPs) authorization packages to validate secure design, alignment to FedRAMP and agency requirements, identify gaps, and advise the FedRAMP Government Lead overall risk posture and compliance • Lead and conduct architecture interviews with CSPs to ensure all critical control areas throughout the architecture are designed to meet program requirements • Develop architecture briefing documents to inform the Government FedRAMP program manager and CISO of CSP compliance with FedRAMP program requirements, technical capabilities, and any concerns noted from material review • Complete comprehensive review and comment documents of CSPs FedRAMP documentation including but not limited to system security plans, policies and procedures, supplemental agency guidance documents, alternative implementation and risk acceptance documents, etc. • Work with CSPs to reconcile and address any documentation and technology gaps discovered during the review • Complete a comprehensive review of CSPs' assessments and package submissions after 3PAO audits and prepare a package briefing for the Government FedRAMP program manager and agency CISO. Artifacts include, but are not limited to, vendor security assessment plans, security assessment reports, vulnerability scans, penetration tests, etc. • Work alongside agency FedRAMP Lead and provide security engineering services • Provide support for Continuous Monitoring activities including but not limited to items such as reviewing annual package submissions, reviewing and scoping significant change proposals, reviewing risk acceptance documents, etc • Interpret FedRAMP and other agency requirements and provide vendors with guidance regarding expectations, technical requirements, and processes • Stay informed of updated FedRAMP guidance, industry best practices, emerging technologies, and Government cybersecurity directives, and provide recommendations to FedRAMP Government lead regarding impacts • Conduct security reviews of technologies for use base consideration within CSPs authorization boundary • Oversee and manage relationships for assigned systems that may be contractor-owned or contractor-operated, ensuring vendors comply with agency security and privacy requirements • Assist stakeholders with IT security-related activities to ensure project deadlines are met • Ensure all systems are operated, maintained, and disposed of IAW documented security policies and procedures including but not limited to Assessment & Authorization (A&A) • Research assigned IT security systems to provide insight into IT security architectures and IT security recommendations for assigned systems

• Configure and support Cisco Firepower/ASA and Palo Alto Networks firewalls • This includes administration, patching, upgrades, rule maintenance, policy updates, performance, and security posture tuning • Troubleshoot complex network connectivity issues involving multiple firewalls, load balancers, and VPN devices, extending the network to the AWS cloud • Troubleshoot Dual Stacked (IPv4 and IPv6) security infrastructure that includes DNS, Firewalls, Cisco ACI, and AWS Cloud • Keep detailed records of customer interaction and problem resolution in a ticketing system • Monitor network traffic, analyze logs, and respond to security incidents and threats • Provide support for internal and external customers in a large enterprise environment • Collaborate with cross-functional teams and support projects as part of the Security team • Manage hardware and software inventories • Support vulnerability assessments and implement remediation strategies • Work with remote teams to install, maintain, and troubleshoot security hardware • Ensure customers receive top-of-the-line support in a polite and courteous manner • Develop standard operating procedures and network topology documentations • Participate in a rotating on-call schedule providing support after hours as required