Principal Threat Analyst

Optiv

. Operate independently in a geographically dispersed team while maintaining situational awareness and keeping the team updated .

Posted 11/10/2026full-timeRemote • Kansas • United StatesLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in security monitoring, incident response, and proactive threat hunting, with a strong understanding of cybersecurity threats, vulnerabilities, and frameworks. Capable of mentoring team members and presenting technical information effectively to diverse audiences.

Highest-signal resume keywords

7-10 Years Related Work ExperienceExtensive Experience With MITRE ATT&CK FrameworkProactive Threat Hunting Using Multiple Client ToolsKnowledge Of Cybersecurity Threats And RisksExperience Conducting Moderate To Complex Investigations

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Incident ResponseThreat HuntingMalware AnalysisVulnerability AssessmentSecurity MonitoringData AnalyticsSecurity Use Case DesignPhishing AnalysisEndpoint InvestigationsAdversary Emulation

Soft Skills

Excellent Verbal And Written Communication SkillsStrong Problem-Solving SkillsAbility To Prioritize Multiple ProjectsFlexibility For Support OperationsMentoring And Team Collaboration

Tools & Technologies

EDR TechnologiesAWSAzureGCPData Visualization ToolsTableauLogging And Monitoring ToolsPublic Cloud ToolsSaaS ToolsPacket Analysis Tools

Industry Keywords

CybersecurityInformation Security FrameworksCVECVSSMalicious ToolkitsAttack MethodologiesCompensating ControlsThreat DetectionOperational ProcessesClient Attack Surface

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityGoogle Cloud PlatformLinuxTableau

About the role

Key responsibilities & impact

Operate independently in a geographically dispersed team while maintaining situational awareness and keeping the team updated
Perform security monitoring and incident response activities across networks using varied tools and techniques
Detect incidents through proactive hunting across security-relevant data sets
Document incident response analysis activities
Review junior analysts’ investigations to ensure quality standards
Develop repeatable methods for finding malicious activity across networks
Recommend enhancements to detection and protection capabilities
Present technical topics to technical and non-technical audiences
Develop and follow operational processes for analyzing, escalating, and assisting with remediation of information security incidents
Prioritize multiple high-priority tasks and formulate responses and recommendations for customers and team members
Assist other security teams
Develop technical skills and advance team capabilities
Engage with and mentor team members
Collaborate on major engineering and architecture initiatives
Apply knowledge of attack methodologies, malware analysis, malicious toolkits, and their manifestations in security technologies
Conduct advanced proactive threat hunting
Apply advanced adversary emulation concepts
Design advanced use cases for insider threat, operational, threat detection, and response
Review defensive and detective controls to reduce client attack surface

Requirements

What you’ll need

7-10 years of related work experience required
6+ years operational experience assessing, reviewing, and remediating infrastructure vulnerabilities, CVEs, and risks
Knowledge of third-party software vulnerabilities and the security threat landscape, especially network and server threats
Knowledge of cybersecurity threats and risks, vendor computing environments, basic systems, and network technologies
Experience with CVEs and CVSS scores
Knowledge of compensating controls and mitigating factors
Knowledge of Information Security frameworks, guidelines, and standard methodologies
Knowledge of Windows and/or Linux operating systems
Knowledge of cybersecurity controls and logging and monitoring tools
Ability to expertly interact with all levels of personnel
Excellent verbal and written communication skills
Strong problem-solving and analytical skills
Ability to work on multiple projects by prioritizing and using a results-oriented approach
Flexibility required for support operations
Advanced understanding of adversary tactics and techniques, security controls, telemetry data, and incident response terminology, processes, and techniques
Experience conducting moderate to complex investigations using endpoint, UEBA, public cloud, SaaS, and packet analysis tools
Security use case design recommendations for threat detection
Threat response activities, including quarantining hosts and common response playbook activities
Proactive threat hunting using multiple client tools
Process development and documentation
Application of threat intelligence to improve detection and response capabilities
Extensive experience with the MITRE ATT&CK framework and associated tactics
Extensive alert triage and endpoint investigations using EDR technologies
Phishing analysis
Malware analysis (excluding reverse engineering)
MITRE ATT&CK framework expertise and understanding of common attack tactics used by threat actors
Ability to recommend tuning of security detection platforms and use cases
Knowledge of AWS, Azure, and GCP cloud service technology
Basic fraud and insider threat investigation skills
Knowledge of metrics and reporting using data visualization tools such as Tableau
Demonstrable data analytics skills
Passion for data analysis
Willingness to travel to meet client needs, approximately 10%

Benefits

Comp & perks

Work/life balance
Professional training resources
Creative problem-solving and the ability to tackle unique, complex projects
Volunteer Opportunities through “Optiv Chips In”
The ability and technology necessary to productively work remotely/from home (where applicable)