Senior Threat Analyst – 2nd Shift

Optiv

. Provide deep-level analysis for client investigations using customer-provided data sources, audit tools, and monitoring tools .

Posted 10/14/2026full-timeRemote • Kansas • United StatesSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in security analysis, incident reporting, and threat mitigation within a Security Operations Center environment. Proficient in utilizing SIEM tools, conducting vulnerability assessments, and providing training on security best practices.

Highest-signal resume keywords

SIEM AnalysisIncident ReportingThreat MitigationVulnerability AssessmentSecurity Operations Center Experience

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Data AnalysisSecurity Incident DocumentationIDS MonitoringMalware PreventionVulnerability ScanningSQL Injection KnowledgeWeb Application SecurityActive Directory SecurityPowerShell SkillsKQL Skills

Soft Skills

Time ManagementCommunication SkillsCustomer InteractionExecutive Presentation Skills

Tools & Technologies

QRadarLogRhythmMcAfee/NitroArcSightSplunkCrowdStrike FalconMicrosoft Defender ExplorerServiceNowFireEyeAnvilogic

Industry Keywords

Security Operations CenterManaged Security ServiceSANS Top 20 Critical Security ControlsOWASP Top 10Advanced Persistent ThreatsMalware Protection ToolsVulnerability Scoring SystemsData Exfiltration TechniquesCovert ChannelsEnterprise Windows Security

Tech Stack

Tools & technologies

AzureFirewallsServiceNowSplunkSQL

About the role

Key responsibilities & impact

Provide deep-level analysis for client investigations using customer-provided data sources, audit tools, and monitoring tools
Document and report potential security incidents, including timelines of events
Work with partners to understand security threats, vulnerabilities, and exploits affecting systems, networks, and assets
Analyze security enforcement technologies including SIEM, antivirus, content filtering/reporting, malware prevention, firewalls, intrusion detection systems, web application firewalls, messaging security platforms, and vulnerability scanners
Perform knowledge transfers, document findings, and train clients on mitigation of identified threats
Recommend tuning and best practices to peers and customers
Research current threats and attack vectors being exploited in the wild
Work with analysts on escalations and perform investigations
Discuss client security posture and recommend improvements to holistic security approaches
Provide gap analyses to improve client security posture
Maintain and develop standard operating procedures for the threat analyst team
Develop and maintain playbooks and runbooks
Work with internal teams to improve the efficiency and effectiveness of security analysis
Train new analysts on security and tools
Create and maintain a Content Catalog based on security essentials and the evolving threat landscape
Perform quality assurance reviews of security alerts handled by team members
Collaborate with Technology Engineers, Architects, and Threat Analysts to service customers in Optiv Security’s 24x7x365 Security Operations Center and Advanced Fusion Center

Requirements

What you’ll need

Associate's degree or equivalent with experience working in a Security Operations Center (SOC), Managed Security Service (MSS), or enterprise network environment as a point of escalation
Typically 3+ years of professional experience in the Information Security field
Excellent time management, reporting, and communication skills, including customer interactions and executive presentations
Data analysis using SIEM, database tools, and Excel
Experience troubleshooting security devices and SIEM
Ability to create and maintain content within SIEM environments and make recommendations to improve visibility
IDS monitoring/analysis with tools such as Sourcefire and Snort
Experience with SIEM platforms such as QRadar, LogRhythm, McAfee/Nitro, ArcSight, or Splunk preferred
Knowledge of direct and indirect attacks, including SQL injection and cross-site scripting
Experience with web-based attacks, OWASP Top 10, network-based DoS, brute force, HTTP-based DoS, denial of service, and network/system-based attacks
Familiarity with SANS Top 20 Critical Security Controls
Understanding of enterprise Windows security, including Active Directory, Windows security architecture and terminology, privilege escalation techniques, mitigation controls, and system hardening
Experience with anti-virus and host-based intrusion prevention systems
Experience monitoring at least one commercial AV solution, such as McAfee/Intel, Symantec, Sophos, or Trend Micro
Experience with XSOAR, Anvilogic, Azure/Entra ID, CrowdStrike Falcon, Recorded Future, Proofpoint TAP/TRAP, Egress, Microsoft Defender Explorer, and ServiceNow preferred/helpful
PowerShell skills helpful; KQL skills helpful
Ability to identify common false positives and suggest tuning
Understanding of malware root causes and proactive mitigation
Knowledge of malware propagation in enterprise environments
Familiarity with web-based exploit kits and their methods
Familiarity with Advanced Persistent Threats and targeted malware
Experience and understanding of malware protection tools such as FireEye in an enterprise environment
Knowledge of covert channels, egress, and data exfiltration techniques
Familiarity with vulnerability scoring systems such as CVSS
Basic understanding of vulnerability assessment tools and exploitation frameworks
Ability to work a 2nd-shift schedule, 4x10 Wednesday-Saturday, 2pm-midnight EST, with flexibility to rotate between days, mids, and nights

Benefits

Comp & perks

A company committed to our inclusive value through our Employee Resource Groups
Work/life balance
Professional training resources
Creative problem-solving and the ability to tackle unique, complex projects
Volunteer Opportunities through “Optiv Chips In”
The ability and technology necessary to productively work remotely/from home (where applicable)