Principal Threat Analyst

Job not on LinkedIn

🔥 0 minutes ago

🌪️ Kansas – Remote

🌪️ Kansas – Remote

⏰ Full Time

🔴 Lead

🧐 Analyst

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 10%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.Why this score:

• Just posted.
• Jobs at this company usually fill in 21 days.
• No salary listed.

Apply Now

Find Similar Remote Jobs

Optiv

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2012

Optiv Security is the cyber advisory and solutions leader, delivering strategic and technical expertise to nearly 6,000 companies across every major industry. We partner with organizations to advise, deploy and operate cybersecurity programs from strategy and managed security services to risk, integration and technology solutions. With clients at the center of our unmatched ecosystem of people, products, partners and programs, we accelerate business progress like no other company can.We manage cyber risk so you can secure your full potential.

📋 Description

• Operate independently in a geographically dispersed team while maintaining situational awareness and keeping the team updated • Perform security monitoring and incident response activities across networks using varied tools and techniques • Detect incidents through proactive hunting across security-relevant data sets • Document incident response analysis activities • Review junior analysts’ investigations to ensure quality standards • Develop repeatable methods for finding malicious activity across networks • Recommend enhancements to detection and protection capabilities • Present technical topics to technical and non-technical audiences • Develop and follow operational processes for analyzing, escalating, and assisting with remediation of information security incidents • Prioritize multiple high-priority tasks and formulate responses and recommendations for customers and team members • Assist other security teams • Develop technical skills and advance team capabilities • Engage with and mentor team members • Collaborate on major engineering and architecture initiatives • Apply knowledge of attack methodologies, malware analysis, malicious toolkits, and their manifestations in security technologies • Conduct advanced proactive threat hunting • Apply advanced adversary emulation concepts • Design advanced use cases for insider threat, operational, threat detection, and response • Review defensive and detective controls to reduce client attack surface

🎯 Requirements

• 7-10 years of related work experience required • 6+ years operational experience assessing, reviewing, and remediating infrastructure vulnerabilities, CVEs, and risks • Knowledge of third-party software vulnerabilities and the security threat landscape, especially network and server threats • Knowledge of cybersecurity threats and risks, vendor computing environments, basic systems, and network technologies • Experience with CVEs and CVSS scores • Knowledge of compensating controls and mitigating factors • Knowledge of Information Security frameworks, guidelines, and standard methodologies • Knowledge of Windows and/or Linux operating systems • Knowledge of cybersecurity controls and logging and monitoring tools • Ability to expertly interact with all levels of personnel • Excellent verbal and written communication skills • Strong problem-solving and analytical skills • Ability to work on multiple projects by prioritizing and using a results-oriented approach • Flexibility required for support operations • Advanced understanding of adversary tactics and techniques, security controls, telemetry data, and incident response terminology, processes, and techniques • Experience conducting moderate to complex investigations using endpoint, UEBA, public cloud, SaaS, and packet analysis tools • Security use case design recommendations for threat detection • Threat response activities, including quarantining hosts and common response playbook activities • Proactive threat hunting using multiple client tools • Process development and documentation • Application of threat intelligence to improve detection and response capabilities • Extensive experience with the MITRE ATT&CK framework and associated tactics • Extensive alert triage and endpoint investigations using EDR technologies • Phishing analysis • Malware analysis (excluding reverse engineering) • MITRE ATT&CK framework expertise and understanding of common attack tactics used by threat actors • Ability to recommend tuning of security detection platforms and use cases • Knowledge of AWS, Azure, and GCP cloud service technology • Basic fraud and insider threat investigation skills • Knowledge of metrics and reporting using data visualization tools such as Tableau • Demonstrable data analytics skills • Passion for data analysis • Willingness to travel to meet client needs, approximately 10%

🏖️ Benefits

• Work/life balance • Professional training resources • Creative problem-solving and the ability to tackle unique, complex projects • Volunteer Opportunities through “Optiv Chips In” • The ability and technology necessary to productively work remotely/from home (where applicable)

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume