Threat Analyst | Remote, USA

Lensa; Overland Park (KS); Remote; USD 70,000 - 100,000; Full time

Job summary

Join Lensa as a Threat Analyst, where you'll be pivotal in monitoring security alerts for our clients. This role requires flexibility for evening hours as part of a 24/7 Security Operations Center. Ideal candidates will have 2-3+ years in Information Security and experience with tools such as SIEM and EDR.

Benefits

Work/life balance

Professional training

Volunteer opportunities

Remote work capabilities

Qualifications

• 2-3+ years of professional experience in Information Security.
• Experience in SOC, MSS, or similar environments.
• Knowledge of enterprise security architecture and attack mitigation techniques.

Responsibilities

• Monitor security alerts and provide incident documentation.
• Analyze security technologies and coordinate urgent responses.
• Research current threats impacting customer environments.

Skills

Time management

Data analysis

Communication

Customer interaction

Tools

SIEM

EDR

UEBA

Job description

3 days ago Be among the first 25 applicants

Lensa partners with DirectEmployers to promote this job for Optiv.

The Threat Analyst will provide security alert monitoring and detection utilizing customer-provided data sources, audit, and monitoring tools.

This role will require evening hours as part of our 24/7/365 Security Operations Center schedule. A Threat Analyst must be flexible and adapt quickly to change. The Threat Analyst will work closely with our Senior Threat Analyst to service customers through our Managed Detection and Response offering.

How You’ll Make An Impact

• Document and report potential security incidents identified in customer environments, including timelines of events.
• Provide triage, analysis, and escalation on security technologies like SIEM, EDR, and UEBA platforms from various log sources.
• Coordinate security events requiring urgent response, containment, and remediation.
• Maintain understanding of security threats, vulnerabilities, and exploits impacting systems, networks, and assets.
• Perform knowledge transfers, document, and triage client issues related to threat mitigation.
• Provide ongoing recommendations on security best practices.
• Research current threats and attack vectors being exploited in the wild.
• Utilize SOPs and KBs for incident response and analysis.

What We’re Looking For

• 2-3+ years of professional experience in Information Security.
• Experience investigating and troubleshooting enterprise networks and systems in a SOC, MSS, or similar environment.
• Strong time management, reporting, communication skills, and prioritization ability.
• Data analysis experience using SIEM, databases, SOAR tools, and reporting systems.
• Experience with SIEM/EDR/UEBA platforms like QRadar, Splunk, Exabeam, Sentinel, Crowdstrike, or Defender is a plus.
• Ability to generate detailed reports and recommendations.
• Experience as a point of escalation in technical environments.
• Customer interaction skills and issue resolution experience.
• Knowledge of enterprise security architecture, common attacks, and mitigation techniques.
• Understanding of malware propagation, web-based exploits, APTs, and exfiltration techniques.
• Familiarity with vulnerability scoring (CVSS) and assessment tools.
• Basic knowledge of security devices like firewalls, routers, and anti-malware solutions.
• Ability to troubleshoot technical issues and ask probing questions.

What You Can Expect From Optiv

• Commitment to Diversity, Equity, and Inclusion.
• Work/life balance, professional training, and opportunities for complex projects.
• Volunteer opportunities and community engagement.
• Remote work capabilities where applicable.

EEO Statement

Optiv is an equal opportunity employer. All qualified applicants will be considered regardless of race, color, religion, sex, gender identity, sexual orientation, pregnancy, age, marital status, genetic info, national origin, disability, military or veteran status, or other protected categories.

We respect your privacy. By applying, you acknowledge our privacy policy and consent to data processing. For details, see our Applicant Privacy Notice.

If you have questions, contact [e-mail].