Threat Operations Lead — AI-Driven SOC

Optiv Security Inc.; Overland Park (KS); Remote; USD 120,000 - 170,000; Full time

Benefits offered by this job

Remote work where applicable

Job summary

Optiv Security Inc. is seeking an ASO Threat Analyst Manager for the second shift (Tue-Fri, 12PM-11PM ET).

You will lead a frontline security operations team responsible for triaging, investigating, and containing threats across multiple clients, coordinating with AI workflows and human analysts. In this hands-on leadership role, you will manage queue dynamics, conduct AARs, mentor senior analysts, and drive incident response during critical events while collaborating with Detection Engineering,

Qualifications

• 6 to 8+ years in Information Security with strong technical foundations in threat analysis, network traffic analysis, or systems administration.
• 3+ years in an active SOC/MDR/MSSP, including 1–2+ years in a tactical lead or senior escalation role.
• Hands-on experience with AI-assisted triage, SOAR playbooks, or agentic security workflows.
• Strong communication, de-escalation, and cross-team collaboration skills.

Responsibilities

• Own daily shift execution, queue hygiene, and alert velocity to meet client SLAs/SLOs.
• Mentor Threat Analysis team and coordinate with Detection Engineering, SOAR Engineering, and Threat Hunting.
• Lead client-facing incident discussions with a calm, consultative posture.
• Coach analysts toward technical career milestones in threat hunting and incident response.

Skills

Threat analysis

Network analysis

Systems administration

AI-assisted triage

SOAR

Threat hunting

Leadership

Incident response

EDR/XDR

Communication

Education

Bachelor's degree in a technical field

GCIH

GCIA

CySA+

Tools

Google SecOps

CrowdStrike

SentinelOne

Splunk

Microsoft Defender/Sentinel

ServiceNow

Jira

Job description

Optiv Security Inc. is seeking an ASO Threat Analyst Manager for the second shift (Tue-Fri, 12PM-11PM ET).

You will lead a frontline security operations team responsible for triaging, investigating, and containing threats across multiple clients, coordinating with AI workflows and human analysts. In this hands-on leadership role, you will manage queue dynamics, conduct AARs, mentor senior analysts, and drive incident response during critical events while collaborating with Detection Engineering,