ASO Threat Analyst Manager

Job not on LinkedIn

🔥 11 minutes ago

🐊 Florida, Kansas, +3 more states – Remote

🐊 Florida – Remote 🌪️ Kansas – Remote 🐎 Kentucky – Remote 🌲 North Carolina – Remote 🌴 South Carolina – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🧐 Analyst

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Optiv

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2012

Optiv Security is the cyber advisory and solutions leader, delivering strategic and technical expertise to nearly 6,000 companies across every major industry. We partner with organizations to advise, deploy and operate cybersecurity programs from strategy and managed security services to risk, integration and technology solutions. With clients at the center of our unmatched ecosystem of people, products, partners and programs, we accelerate business progress like no other company can.We manage cyber risk so you can secure your full potential.

📋 Description

• Own daily shift execution, queue hygiene, and alert velocity to meet client SLAs and SLOs • Supervise the human-in-the-loop operational interface and validate agentic AI triage outputs, enriched telemetry, and automated investigations • Conduct ticket audits and investigation spot-checks for high-fidelity analysis, defensible evidence, and client-facing notes • Serve as the primary operational escalation point during critical P1/P0 security events and client crises • Run shift handoffs, identify operational bottlenecks, and balance analyst workload • Lead tactical After-Action Reviews to identify process breakdowns and remediation steps • Direct and mentor Senior Threat Analysts and oversee handoffs with Detection Engineering, SOAR Engineering, and Threat Hunting • Govern analyst feedback, tuning requests, automation ideas, and hunt referrals • Track cross-team action items and accountability through completion • De-escalate tense client interactions and lead client-facing incident discussions • Partner with Client Success Managers on at-risk or noisy accounts • Mentor analysts through real-time investigation guidance, scenario walk-throughs, and technical quality reviews • Guide analysts in using autonomous and agentic tools while building critical-thinking and investigative skills • Manage shift schedules, coverage models, and on-call rotations • Coach analysts toward technical career milestones in threat hunting, detection engineering, and advanced incident response

🎯 Requirements

• 6 to 8+ years in Information Security, with strong technical foundations in threat analysis, network traffic analysis, or systems administration • 3+ years within an active SOC, MDR, or MSSP environment • 1 to 2+ years in a tactical lead, supervisory, or senior escalation role • Experience de-escalating difficult client interactions and steering conversations toward productive resolutions • Ability to coach senior technical staff, delegate working-level tasks, and maintain quality control and cross-team alignment • Hands-on experience with AI-assisted triage, SOAR playbooks, or agentic security workflows • Ability to run live incident triage and manage queue dynamics under pressure in a multi-tenant services model • Working knowledge of modern EDR/XDR and SIEM tools, including Google SecOps, CrowdStrike, SentinelOne, Microsoft Defender/Sentinel, or Splunk • Practical familiarity with the MITRE ATT&CK framework and common adversary tradecraft • Clear, adaptive verbal and written communication skills • Bachelor's degree in a technical field or equivalent hands-on operational experience • Direct experience collaborating with Detection Engineering and SOAR automation pipelines • Practical knowledge of ITIL-aligned ticketing workflows, such as ServiceNow or Jira • Active technical certifications such as GCIH, GCIA, CySA+, or vendor-specific platform certifications

🏖️ Benefits

• A company committed to our inclusive value through our Employee Resource Groups • Work/life balance • Professional training resources • Creative problem-solving and the ability to tackle unique, complex projects • Volunteer Opportunities through “Optiv Chips In” • The ability and technology necessary to productively work remotely/from home (where applicable)