ASO Threat Operations Lead — 2nd Shift

Optiv; Overland Park (KS); Remote; USD 110,000 - 170,000; Full time

Benefits offered by this job

Volunteer Opportunities

Remote work available

Job summary

Optiv seeks a seasoned Threat Analyst Manager to lead a 24/7 ASO team, triaging and containing threats across multi-tenant clients. You will mentor Senior Threat Analysts and collaborate with Detection Engineering, SOAR, and Threat Hunting while maintaining strict SLAs.

You will de-escalate tense client interactions, drive actionable security recommendations, and oversee shift handoffs in a high-tempo environment. A technical background and strong communication are essential.

Qualifications

• 6–8+ years in information security with hands-on threat analysis.
• 3+ years in a SOC/MDR/MSSP with supervisory responsibilities.
• Strong de-escalation and client-facing communication skills.
• Hands-on experience with AI-assisted triage, SOAR, or agentic security workflows.
• Experience with modern EDR/XDR and SIEM tools (e.g., CrowdStrike, Splunk).
• Bachelor’s degree in a technical field or equivalent hands-on experience.
• Certifications such as GCIH, GCIA, CySA+ are preferred.

Responsibilities

• Own daily shift execution, queue hygiene, and alert velocity across the ASO service model.
• Lead a team of threat analysts, triaging, investigating, and containing threats.
• Coordinate with Detection Engineering, SOAR Engineering, and Threat Hunting.
• Run After-Action Reviews and drive remediation steps.
• Coach analysts and manage shift schedules to prevent burnout.

Skills

Threat analysis

Network analysis

Systems administration

Leadership mentoring

AI-assisted triage

SOAR playbooks

Incident triage

Client communication

EDR/XDR & SIEM

MITRE ATT&CK

ITIL ticketing (ServiceNow/Jira)

Certifications (GCIH/GCIA/CySA+)

Education

Bachelor's degree in a technical field

Tools

Google SecOps

CrowdStrike

SentinelOne

Microsoft Defender/Sentinel

Splunk

ServiceNow

Jira

Job description

Optiv seeks a seasoned Threat Analyst Manager to lead a 24/7 ASO team, triaging and containing threats across multi-tenant clients. You will mentor Senior Threat Analysts and collaborate with Detection Engineering, SOAR, and Threat Hunting while maintaining strict SLAs.

You will de-escalate tense client interactions, drive actionable security recommendations, and oversee shift handoffs in a high-tempo environment. A technical background and strong communication are essential.