Jobs at Valiant Solutions

Supports authorized red team and penetration testing engagements across networks, applications, APIs, systems, and cloud environments. Performs reconnaissance, vulnerability validation, exploitation, attack-path analysis, and security control testing under established rules of engagement. Documents vulnerabilities, evidence, adversary techniques, risks, and remediation recommendations using MITRE ATT&CK, retests fixes, and monitors emerging exploits and defensive technologies.

Conduct authorized red team and penetration testing assessments across enterprise networks, applications, APIs, identity systems, and cloud environments. Develop realistic MITRE ATT&CK-aligned attack scenarios, perform reconnaissance through exploitation and lateral movement, identify attack paths, evaluate defensive detection, and document findings with remediation recommendations. Participate in purple team exercises, validate remediation, develop testing scripts and tools, and mentor less-experienced testers. The role requires a Public Trust clearance, U.S. citizenship, relevant certifications, and at least five years of experience.

Performs and leads penetration tests and vulnerability assessments of customer information systems. Identifies exploitable vulnerabilities, conducts root cause analysis, recommends remediations aligned with NIST SP 800-53, and presents findings to system owners and engineers. Maintains Red Cell infrastructure, develops or modifies testing tools, applies computer and network forensics, researches emerging vulnerabilities and countermeasures, and contributes to methodologies, deliverables, and performance metrics.

Provides senior cybersecurity incident response, breach management, compliance assessment, and risk management support for higher education institutions handling sensitive federal data. Coordinates incident investigation, containment, remediation, corrective actions, and case closure; evaluates administrative, technical, and physical safeguards; identifies compliance gaps; develops reports and actionable recommendations; and advises government, institutional, and technical stakeholders on protecting CUI, FTI, and PII.

Conduct independent full-scope federal IT audits, internal control reviews, FISMA self-assessments, and IV&V of audit corrective actions. Evaluate control effectiveness, maintain internal control inventories, assess risk mitigation activities, analyze findings, apply data analytics and automated testing, and present recommendations to customer management. The role requires knowledge of federal audit frameworks, OMB A-123, NIST assessment guidance, COBIT, COSO, GAO FISCAM, and experience supporting OIG and GAO audits.

Leads IT business process analysis, improvement, and automation for a federal risk management and administration office. Designs and maintains SharePoint and Microsoft Power Platform solutions, including Power Apps, Power Automate, and Power BI dashboards. Supports risk, audit, policy, compliance, and records management activities; prepares status reports, meeting minutes, and written communications. Applies Agile and Waterfall methods, evaluates AI productivity tools, and coordinates cross-functional automation initiatives.

Conduct full-scope IT audits and control reviews for a federal customer; assess compliance with federal frameworks, coordinate OIG and GAO audit requests, manage stakeholder communications, track corrective actions, prepare closure packages, maintain audit documentation and dashboards, reconcile audit statistics, and support control testing and internal controls inventory updates.

Develop and govern federal IT policies, directives, SOPs, and guidance for a CIO organization. The role manages a 40-plus-document policy inventory, coordinates reviews and updates, identifies policy gaps, ensures alignment with federal statutes and NIST standards, translates technical and cyber risk into strategic recommendations, and briefs executives. The planner also manages policy lifecycles, stakeholder collaboration, document dependencies, and five-year review requirements.

Provides security engineering and compliance expertise for FedRAMP Cloud Service Provider authorization packages. Reviews cloud architectures, security controls, system security plans, assessment reports, vulnerability scans, and penetration tests against NIST, FedRAMP, FISMA, RMF, and agency requirements. Leads architecture interviews, identifies technical and documentation gaps, advises government program leaders and CISOs on risk posture, supports continuous monitoring, and guides vendors through remediation and authorization activities.

Develops competitive federal proposal cost volumes, pricing models, rate structures, BOEs, and price-to-win strategies. Ensures compliance with FAR, DFARS, CAS, TINA, and solicitation requirements across major contract types. Manages subcontractor and teaming partner pricing intake, conducts cost realism and price analysis, supports audits and negotiations, and coordinates with cross-functional teams under tight proposal deadlines. Improves pricing tools and methodologies while supporting contract administration, forecasting, and financial analysis.

Designs, implements, and maintains Splunk data ingestion pipelines, integrations, alerts, infrastructure, and security controls across on-premises and cloud environments. Manages system performance, upgrades, access controls, troubleshooting, root cause analysis, documentation, and cybersecurity tool integrations. Collaborates with SOC teams to optimize processes, tune tools, support incident response, and ensure data integrity, compliance, and reliable high-volume data processing.

Provides Tier III SOC support through advanced SIEM alert triage, forensic analysis, incident escalation, threat hunting, detection engineering, and malware investigation. Leads shift handovers, monitors security tool health, updates playbooks and procedures, supports Red and Purple Team exercises, prepares incident reports, mentors junior analysts, and collaborates with government and partner SOCs. Requires six or more years of SOC experience, cybersecurity certifications, AWS security telemetry expertise, and a Public Trust clearance.

Leads training, user readiness, onboarding, functional support, knowledge management, and adoption for the AirHub platform implementation. Develops role-based curricula, guides, videos, FAQs, and support processes; delivers instructor-led, virtual, and self-service training; supports UAT, Beta, production rollout, and hypercare; manages issue triage and escalation; and monitors readiness, support, training effectiveness, feedback, and adoption metrics.

Designs, analyzes, documents, integrates, and migrates complex environmental datasets for AirHub business lines. Responsibilities include analyzing legacy databases, creating logical and physical data models, documenting mappings and business rules, developing migration specifications and API integrations, supporting data governance and testing, and producing technical documentation. The role also requires close collaboration with business stakeholders in an Agile delivery environment.

Develop and maintain full-stack web applications for a federal environmental data client. Responsibilities include participating in Agile SDLC activities, designing and implementing scalable software, collaborating with analysts and stakeholders, testing and deploying applications, maintaining technical documentation, following development best practices, and recommending modern tools and technologies. The role requires AWS, TypeScript, Node.js, React or Angular, PostgreSQL, event-driven architecture, and strong communication skills.

Leads enterprise AirHub implementation from UAT through beta, production rollout, stabilization, and transition to sustained operations. Develops integrated implementation roadmaps, readiness criteria, governance, and success measures while coordinating Product, Engineering, Quality Engineering, Data, DevSecOps, business, and external stakeholders. Oversees release readiness, organizational change management, training, user support, adoption, risks, dependencies, escalations, phased rollouts, and operational transition.

Leads enterprise quality engineering and testing strategy for AirHub, overseeing functional, integration, regression, automation, performance, UAT, and stakeholder testing. Establishes testing frameworks, manages contractor test engineers, coordinates client and EPA testing resources, governs TestRail, defines quality metrics, manages defects, and supports release readiness decisions.

Validates complex enterprise data processing, transformations, migrations, reconciliations, reporting, business rules, APIs, and event-driven workflows. Develops data validation strategies, automated database validation scripts, migration tests, and reconciliation reports. Partners with data architects and engineers while mentoring junior testers. The role requires advanced SQL, automation, ETL validation, relational data modeling, large-scale migration testing, and Python programming.

Owns and governs cybersecurity systems architecture across cloud-native AWS GovCloud environments. Designs Zero Trust solutions, security controls, integration patterns, architecture blueprints, and engineering design documents. Leads integration of SIEM, SOAR, CDM, TDSP, EDR, identity platforms, and DevSecOps pipelines. Oversees cloud architecture, modernization, technical roadmaps, governance reviews, and collaboration with engineering and business stakeholders while ensuring compliance with federal security standards and FedRAMP requirements.

Leads cybersecurity GRC programs for government clients, overseeing contractor teams, task orders, project deliverables, compliance, security assessments, RMF sustainment, risk mitigation, schedules, budgets, SLAs, and performance metrics. The role requires technical program management, customer and stakeholder engagement, executive presentations, requirements gathering, reporting, and support for information security solutions across networks, systems, and applications.