Sr. Threat Analyst- 2nd Shift | Remote

This position will be fully remote and can be hired anywhere in the continental U.S. This is a U.S. 2nd Shift position. The schedule is 4x10 Wednesday-Saturday (2pm-midnight EST). This team provides 24/7 support. This role requires shift flexibility, including the ability to rotate between days, mids, and nights.

Optiv is seeking a Sr. Threat Analyst to join Optiv Security’s 24x7x365 Security Operations Center as a member of the Advanced Fusion Center (AFC) team. The Optiv AFC line of business consists of providing security operations expertise to a robust and growing client base. Our team is comprised of highly technical individuals capable of delivering managed services to clients in all industry verticals.

The Optiv AFC specializes in custom-tailored security solutions delivered primarily through three practice teams:
Client Engagement, Engineering Operations, and Detection and Response Operations. These teams work in tandem to assist our clients in reaching their security maturity goals.

• High level professional writing experience regarding documenting and reporting on potential security incidents identified in customer environments to include timeline of events.
• Work with partners to maintain an understanding of security threats, vulnerabilities, and exploits that could impact systems, networks, and assets.
• Provide analysis on various security enforcement technologies including, but not limited to SIEM, anti-virus, content filtering/reporting, malware prevention, firewalls, intrusion detection systems, web application firewalls, messaging security platforms, vulnerability scanners etc.
• Perform knowledge transfers, document, and train clients regarding mitigation of identified threats.
• Provide ongoing recommendations to peers and customers on tuning and best practices.
• Actively research current threats and attack vectors being exploited in the wild
• Actively work with analysts and perform investigations on escalations.
• Ability to discuss security posture with multiple clients and make recommendations to better their holistic security approach.
• Provide gap analysis for clients to better their security posture.
• Maintain and develop SOPs for threat analyst team.
• Develop and maintain Playbooks and runbooks.
• Work with internal teams to increase efficiency and effectiveness of security analysis provided by the threat analysis team.
• Training of new analysts on security and tools
• Create and maintain Content Catalog based on security essentials and the evolving threat landscape.
• Provide quality assurance (QA) review of security alerts handled by Team members.

• Associate's degree or equivalent with experience working in a Security Operations Center (SOC), Managed Security Service (MSS), or enterprise network environment as a point of escalation.
• 2-4 years Professional experience in the Information Security field, typically gained in 3+ years required
• Excellent time management, reporting, and communication skills including customer interactions and executive presentations.
• Data analysis using SIEM, Database tools, and Excel.
• Experience troubleshooting security devices and SIEM.
• Ability to create and maintain content within SIEM environments and make recommendations to clients to better their visibility.
• IDS monitoring/analysis with tools such as Source fire and Snort
• Experience with SIEM platforms preferred (QRadar, Log Rhythm, McAfee/Nitro, Arc Sight, Splunk) a plus.
• Direct (E.g., SQL Injection) versus indirect (E.g., cross-site scripting) attacks
• Experience with the following attacks:
  Web Based Attacks and the OWASP Top 10, Network Based DoS, Brute force, HTTP Based DoS, Denial of Service, Network Based / System Based Attacks.
• Familiarity with SANS top 20 critical…