Senior Threat Analyst – 2nd Shift

Job not on LinkedIn

🔥 4 minutes ago

🌪️ Kansas – Remote

🌪️ Kansas – Remote

⏰ Full Time

🟠 Senior

🧐 Analyst

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Optiv

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2012

Optiv Security is the cyber advisory and solutions leader, delivering strategic and technical expertise to nearly 6,000 companies across every major industry. We partner with organizations to advise, deploy and operate cybersecurity programs from strategy and managed security services to risk, integration and technology solutions. With clients at the center of our unmatched ecosystem of people, products, partners and programs, we accelerate business progress like no other company can.We manage cyber risk so you can secure your full potential.

📋 Description

• Provide deep-level analysis for client investigations using customer-provided data sources, audit tools, and monitoring tools • Document and report potential security incidents, including timelines of events • Work with partners to understand security threats, vulnerabilities, and exploits affecting systems, networks, and assets • Analyze security enforcement technologies including SIEM, antivirus, content filtering/reporting, malware prevention, firewalls, intrusion detection systems, web application firewalls, messaging security platforms, and vulnerability scanners • Perform knowledge transfers, document findings, and train clients on mitigation of identified threats • Recommend tuning and best practices to peers and customers • Research current threats and attack vectors being exploited in the wild • Work with analysts on escalations and perform investigations • Discuss client security posture and recommend improvements to holistic security approaches • Provide gap analyses to improve client security posture • Maintain and develop standard operating procedures for the threat analyst team • Develop and maintain playbooks and runbooks • Work with internal teams to improve the efficiency and effectiveness of security analysis • Train new analysts on security and tools • Create and maintain a Content Catalog based on security essentials and the evolving threat landscape • Perform quality assurance reviews of security alerts handled by team members • Collaborate with Technology Engineers, Architects, and Threat Analysts to service customers in Optiv Security’s 24x7x365 Security Operations Center and Advanced Fusion Center

🎯 Requirements

• Associate's degree or equivalent with experience working in a Security Operations Center (SOC), Managed Security Service (MSS), or enterprise network environment as a point of escalation • Typically 3+ years of professional experience in the Information Security field • Excellent time management, reporting, and communication skills, including customer interactions and executive presentations • Data analysis using SIEM, database tools, and Excel • Experience troubleshooting security devices and SIEM • Ability to create and maintain content within SIEM environments and make recommendations to improve visibility • IDS monitoring/analysis with tools such as Sourcefire and Snort • Experience with SIEM platforms such as QRadar, LogRhythm, McAfee/Nitro, ArcSight, or Splunk preferred • Knowledge of direct and indirect attacks, including SQL injection and cross-site scripting • Experience with web-based attacks, OWASP Top 10, network-based DoS, brute force, HTTP-based DoS, denial of service, and network/system-based attacks • Familiarity with SANS Top 20 Critical Security Controls • Understanding of enterprise Windows security, including Active Directory, Windows security architecture and terminology, privilege escalation techniques, mitigation controls, and system hardening • Experience with anti-virus and host-based intrusion prevention systems • Experience monitoring at least one commercial AV solution, such as McAfee/Intel, Symantec, Sophos, or Trend Micro • Experience with XSOAR, Anvilogic, Azure/Entra ID, CrowdStrike Falcon, Recorded Future, Proofpoint TAP/TRAP, Egress, Microsoft Defender Explorer, and ServiceNow preferred/helpful • PowerShell skills helpful; KQL skills helpful • Ability to identify common false positives and suggest tuning • Understanding of malware root causes and proactive mitigation • Knowledge of malware propagation in enterprise environments • Familiarity with web-based exploit kits and their methods • Familiarity with Advanced Persistent Threats and targeted malware • Experience and understanding of malware protection tools such as FireEye in an enterprise environment • Knowledge of covert channels, egress, and data exfiltration techniques • Familiarity with vulnerability scoring systems such as CVSS • Basic understanding of vulnerability assessment tools and exploitation frameworks • Ability to work a 2nd-shift schedule, 4x10 Wednesday-Saturday, 2pm-midnight EST, with flexibility to rotate between days, mids, and nights

🏖️ Benefits

• A company committed to our inclusive value through our Employee Resource Groups • Work/life balance • Professional training resources • Creative problem-solving and the ability to tackle unique, complex projects • Volunteer Opportunities through “Optiv Chips In” • The ability and technology necessary to productively work remotely/from home (where applicable)