Principal Threat Analyst | Remote

# Principal Threat Analyst | Remote, USAOptiv  
· optiv.com Category:
Detection & Response

Location:

Remote Level:
Staff / Principal## Quality of life

What the posting states. Hover or tap a perk to see the line it came from.
* Equity This position will be fully remote and can be hired anywhere in the continental U.S.
This team provides 24/7 support.  This role requires shift flexibility, including the ability to rotate between days, mids, and nights.
Optiv is seeking a Principal Threat Analyst to join Optiv Security’s 24x7x365 Security Operations Center as a member of the Advanced Fusion Center (AFC) team. The Optiv AFC line of business consists of providing security operations expertise to a robust and growing client base.  Our team is comprised of highly technical individuals capable of delivering managed services to clients in all industry verticals.

The Optiv AFC specializes in custom-tailored security solutions delivered primarily through three practice teams:
Client Engagement, Engineering Operations, and Detection and Response Operations. These teams work in tandem to assist our clients in reaching their security maturity goals.
The Principal Threat Analyst will provide deep level analysis for client investigations utilizing customer-provided data sources, audit, and monitoring tools at both the government and enterprise level. The Principal Threat Analyst will work closely with our Technology Engineers, Architects, and Threat Analysts to service customers.
How you'll make an impact Operate independently in a geographically dispersed team, while maintaining situational awareness and keeping the team up to date    Perform security monitoring and incident response activities across the networks, leveraging a variety of tools and techniques     Detect incidents through proactive “hunting” across security-relevant data sets     Thoroughly document incident response analysis activities    Review investigations conducted by more junior analysts to ensure quality standards are met    Develop new, repeatable methods for finding malicious activity across the networks    Provide recommendations to enhance detection and protection capabilities     Regularly present technical topics to technical and non-technical audiences    Develop and follow detailed operational processes and procedures to appropriately analyze, escalate, and assist in the remediation of information security incidents     Prioritize multiple high-priority tasks and formulate responses/recommendations to customers and team members in a fast-paced environment    Provide assistance to other security teams    Continually develop new technical skills and push overall team capabilities forward    Engage with and mentor other team members    Work with other teams on major engineering and architecture initiatives      Be innovative with their understanding of attack methodologies, malware analysis, malicious toolkits, and how those may manifest within various security technologies    Advanced proactive threat hunting      Understands advanced adversary emulation concepts     Advanced use case design for insider threat, operational, threat detection and response     Review of defensive and detective controls to reduce client attack surface      What we're looking for  7-10 years of related work experience required 6 years operational experience assessing, reviewing, and remediating infrastructure vulnerabilities, CVE’s, and risks.
Knowledge of third-party software vulnerabilities, security threat landscape, especially network and server threats    Knowledge of cyber security threats and risks, vendor computing environments, basic systems, and network technologies.

Experience with and understanding of CVE’s and CVSS scores    Knowledge…