Senior Threat Analyst - Remote, 2nd Shift SOC

Optiv; United States; Remote; USD 110,000 - 140,000; Full time

Job summary

Optiv is seeking a Sr. Threat Analyst for its 24x7 Security Operations Center.

The role focuses on deep analysis of client investigations using SIEMs and monitoring tools, with collaboration across Engineering Operations and Detection and Response teams. You will document incidents, discuss threats with clients, and contribute to SOPs, playbooks, and content catalogs while staying current on evolving threat landscapes.

Qualifications

• Experience in a Security Operations Center (SOC), MSS, or enterprise network environment as a point of escalation.
• 2-4 years professional experience in Information Security.
• Excellent time management, reporting, and communication skills including customer interactions and executive presentations.
• Data analysis using SIEM, database tools, and Excel.
• Experience troubleshooting security devices and SIEM.
• Ability to create and maintain content within SIEM environments and make recommendations to clients to improve visibility.
• Familiarity with common security controls and threat vectors including OWASP Top 10.

Responsibilities

• Document and report incidents with a clear timeline of events.
• Analyze threats and monitor client environments across on-premises and cloud assets.
• Provide ongoing tuning recommendations for SIEMs and other security technologies.
• Develop and maintain SOPs, playbooks, and runbooks for threat analysts.
• Train new analysts on security concepts and tools and perform QA on alerts.

Skills

Time management

Reporting

Communication

Data analysis

Education

Associate's degree or equivalent

Tools

QRadar

LogRhythm

ArcSight

Splunk

McAfee/Nitro

Sourcefire/Snort

PowerShell

Azure/Entra ID

CrowdStrike Falcon

Recorded Future

Proofpoint TAP/TRAP

Microsoft Defender Explorer

ServiceNow

XSOAR

Anvilogic

Job description

Optiv is seeking a Sr. Threat Analyst for its 24x7 Security Operations Center.

The role focuses on deep analysis of client investigations using SIEMs and monitoring tools, with collaboration across Engineering Operations and Detection and Response teams. You will document incidents, discuss threats with clients, and contribute to SOPs, playbooks, and content catalogs while staying current on evolving threat landscapes.