Optiv_Careers

Related companies:

Jobs at this company:

Apply
🔥 Sr. SOAR Engineer - Phantom
Posted about 13 hours ago

📍 United States of America

🔍 Security

  • 6+ years of related work experience (Bachelor’s degree preferred)
  • 4+ years of technical architecture experience with SIEM & SOAR
  • Experienced with multiple security concepts and methods, such as vulnerability assessments, data classification, privacy assessments, incident response, security policy creation, enterprise security strategies, architectures, and governance.
  • Strong understanding of networking (TCP/IP, OSI model), operating system fundamentals (Windows, Linux), and security technologies (endpoint security, DLP, firewalls, IDS/IPS, etc.)
  • Strong understanding and experience working with application programming/scripting languages (Python, Java, Perl, PowerShell), as well as Regular Expressions.
  • Experience with cloud-based service architecture
  • Understanding of regulatory requirements and compliance issues affecting clients related to privacy and data protection, such as PCI DSS, GLBA, GDPR, etc.
  • Understanding of various security frameworks and/or methodologies (e.g. MITRE ATT&CK, NIST, etc)
  • Experience representing technical viewpoints to diverse audiences
  • Strong written and presentational skills; ability to clearly communicate complex messages to a variety of audiences
  • Experience with enterprise architecture and working as part of a cross-functional team to implement solutions.
  • Strong interpersonal and communication skills; ability to work in a team environment
  • Ability to work independently with minimal direction; self-starter/self-motivated
  • Technical writing experience
  • Possess high standard of integrity and confidentiality
  • Design, develop, and deploy SOAR solutions to automate security operations tasks and workflows.
  • Integrate SOAR platform with a wide range of security tools including SIEM, endpoint protection, threat intelligence platforms, and other cybersecurity solutions.
  • Identify and explain how automation we are building for our clients is returning their investment/adding value
  • Provide mentorship to other technical staff members
  • Provide technical assistance in scoping and other pre-sales activities
  • Take technical leadership on client projects; oversee and guide work performed by other technical staff members.

AWSPythonBashCloud ComputingCybersecurityREST APICI/CDLinuxComplianceNetworkingScripting

Posted about 13 hours ago
Apply
Apply

📍 United States

🔍 Information Security

  • 4+ years of experience in a customer facing project/program delivery leadership role within a professional services organization, with emphasis on information security projects and programs
  • Program Management expertise, specifically demonstrated success managing cross-capability engagements across multiple clients and disparate initiatives on a long term-basis
  • Expert level experience with Project Management methodologies, best practices, and toolsets required
  • Experience interfacing with both clients and partners required
  • Manage engagements from inception to completion
  • Identify and document requirements
  • Support clients on various information security initiatives
  • Manage issues to resolution
  • Onboard the project team
  • Assign individual responsibilities
  • Develop the schedule to ensure timely completion of project
  • Build trust and relationships with customers
  • Oversees all project activity with key clients across Advanced Fusion Center (AFC)
  • Lead project managers in cross-practice and complex engagements
  • Contribute to business development by identifying new opportunities

LeadershipProject ManagementBusiness DevelopmentCybersecurityProject CoordinationCommunication SkillsAgile methodologiesProblem-solving skillsAccount ManagementClient relationship managementCross-functional collaborationRisk ManagementStakeholder managementBudget management

Posted about 13 hours ago
Apply
Apply

📍 United States

  • Bachelor’s degree from a four-year college or university or equivalent work experience in a related field required.
  • 8+ years of professional services experience.
  • 8+ years leading customer service-oriented teams.
  • 8+ years professional experience in managed services.
  • Experience selling professional services.
  • Experience delivering client services.
  • Advanced business acumen and technical savvy required.
  • Experience with reporting platforms.
  • Sharp analytical abilities and the ability to make sound decisions quickly required.
  • Proven ability to make decisions and perform complex problem-solving activities under pressure.
  • Ability to read and comprehend simple instructions, short correspondence, and memos.
  • Ability to write correspondence.
  • Ability to effectively present information in one-on-one and small group situations to customers, clients, and other employees of the organization.
  • Strong written and verbal communication skills are a must.
  • Ability to clearly communicate via telephone, e-mail and written.
  • Lead a team providing operational and strategic planning, including fostering innovation, planning projects, and organizing and negotiating the allocation of resources.
  • Work closely with clients on reporting, escalations, and overall service satisfaction.
  • Collaborate and consult with Managed Service leaders on the overall advancement of the organization and Optiv in general.
  • Direct and drive KPI measurement, and process and documentation improvement.
  • Manage staffing, including recruitment, supervision, scheduling, development, evaluation, and disciplinary actions.
  • Develop and maintain an educational environment where the knowledge and performance and morale of the group is constantly advancing.
  • Perform annual staff appraisals.
  • Establish and maintain regular written and in-person communications with the organization’s executives, other group heads regarding pertinent activities.
  • Ensure client onboarding projects are delivered on-time, within scope and within budget.
  • Manage a team of highly motivated, customer-focused individuals to manage the overall success of service offerings and retention of clients.
  • Review and report service performance against operating plans and standards, working in collaboration with the services delivery teams to monitor program metrics and KPI’s.
  • Drive program/client revenue growth by identifying cross-sell and upsell opportunities.
  • Present monthly and quarterly reports on service performance as requested or required both clients and Managed Services leadership.
  • Possession of excellent oral and written communication skills, including making clear and concise presentations to various audiences with an executive presence.
  • Performs other duties as required.

LeadershipProject ManagementBusiness AnalysisPeople ManagementHR ManagementCross-functional Team LeadershipOperations ManagementCommunication SkillsCustomer serviceAgile methodologiesMentoringPresentation skillsWritten communicationProblem-solving skillsAccount ManagementVerbal communicationReportingTrainingRecruitmentClient relationship managementSales experienceRisk ManagementStrategic thinkingProcess improvementFinancial analysisBudget management

Posted about 13 hours ago
Apply
Apply

📍 United States

🔍 Security

  • Bachelor's degree and approximately 5-7 years of related work experience, preferably in a prior consultancy role
  • Hold or pursue relevant certifications in the cybersecurity and risk management industry such as, CISSP, CISM, CRISC, CCSP, CMMC CCP/CCA, ISO 27001 (Lead implementer)
  • Strong understanding of cybersecurity frameworks (NIST, ISO 27001, CMMC, CIS, PCI, HIPPA, etc.)
  • Hands on experience with security assessments, risk management, compliance assessments, policy and standards and other related risk and compliance activities
  • Experience working in cyber resilience including, Business Continuity Planning, Disaster Recovery, Business Impact Analysis, Operational Resilience
  • Strong analytical and problem-solving skills for cybersecurity challenges
  • Excellent communication and report writing skills for client engagements
  • Ability to manage multiple projects and work independently in a fast-paced environment
  • Willingness to travel to meet client needs
  • The successful candidate must hold related professional certifications such as the CISSP, CISM, and/or CISA
  • Comfortable delivering independent work or takes the engagement lead for complex projects
  • Acts as engagement escalation point to assist other delivery team consultants
  • Work closely with clients to define, build and implement security leading practices
  • Conduct risk assessments, security readiness audits, gap analysis with compliance and regulatory frameworks
  • Assess compliance with industry standards and regulatory frameworks, such as, NIST 800-171/53, ISO 27001, COSO, CMMC, HIPPA, PCI, or some combination of these
  • Assist clients in developing risk management frameworks and mitigation strategies
  • Provide third-party risk assessments to evaluate client’s supply chain, key vendors
  • Support the design and implementation of cybersecurity policies, procedures, and governance frameworks
  • Develop and refine security strategy assessments, security program plans, and POA&M
  • Translate security operational and technical risks into business implications with recommendations for stakeholders
  • Conduct workshops, stakeholder interviews, security awareness sessions and presentations with key client stakeholders
  • Collaborate with Principal Consultants and Technical Managers to support client objectives
  • Maintain clear documentation and reporting for security findings, analysis and recommendations
  • Stay updated on emerging cybersecurity, risk management, key technologies and regulations
  • Contribute to thought leadership through research, whitepapers and presentations
  • Effectively provide knowledge transfer and post-production support activities as necessary

CybersecurityComplianceClient relationship managementRisk Management

Posted 3 days ago
Apply
Apply

📍 United States

🔍 Information Security

  • Bachelor's Degree from four-year college or university Information Technology, Information Security/Assurance, Engineering or similar area of study required
  • 10+ years professional IT and Information Security experience
  • 5+ years professional experience in cyber operations centers
  • 3+ years professional experience in managed services
  • Deep understanding of SIEM and Endpoint  vendors, solutions and architecture such as LogRhythm, QRadar, Splunk, Exabeam, CrowdStrike, SentinelOne, Microsoft ATP, etc.
  • Understanding of regulatory compliance such as NIST, SOX, HIPPA, NERC CIP, PCI, etc. and their differentiators across global regions
  • Understanding of Security Orchestration, Automation and Response concepts.
  • Experience working with ticketing and knowledge management systems such as Service Now.
  • Experience with ITIL concepts and practices.
  • Experience with security analytics platforms.
  • CompTIA Security+ Certification One or more certifications in Security/Networking Upon Hire preferred
  • CISSP Certified Information Systems Security Professional One or more certifications in Security/Networking Upon Hire preferred
  • GSEC Upon Hire preferred
  • GCIA Upon Hire preferred
  • GCIH Upon Hire preferred
  • Certified Project Management Professional (PMP)-PMI Upon Hire preferred
  • Lead and manage Security Operations Center.
  • Ensure quality security alert triage and analysis, incident identification, assessment, reporting, communication, mitigation and monitoring related to Optiv’s Managed Detection and Response service offerings.
  • Build and improve integration process as needed to continue to improve service efficiency, effectiveness and client satisfaction
  • Drive the responsiveness to the client(s) of the entire Cyber Operations organization
  • Monitor service delivery for contractual compliance
  • Review policies and highlight the challenges in managing SLAs with a focus on quality security analysis and updates to clients.
  • Regularly review and revise standard operating procedures and protocols to ensure SOC continues to effectively meet operational requirements.
  • Perform threat management, threat modeling, identify threat vectors and develop use cases for security monitoring.
  • Creation of reports, dashboards, metrics for SOC operations and presentation to Sr. Mgmt.
  • Routinely engage with cross functional teams to evaluate SOCs ability to meet stakeholder needs.
  • Evaluate existing technical capabilities and systems and identify opportunities for improvement.
  • Develop and mentor staff through open communication, training and development opportunities, and performance management processes to ensure team proficiency; build and maintain employee morale and motivation.
  • Conduct after action reviews to identify lessons learned and best practices.
  • Work closely Security Leadership to identify implement process changes, improvements and efficiencies and ensure solid security practices.
  • Develop communication channels with technology owners and the business to evangelize the evolving threat landscape.
  • Coordinate actions between clients and the appropriate service delivery departments to ensure needs are met
  • Performs other duties as assigned
  • Complies with all policies and standards

LeadershipProject ManagementCloud ComputingCybersecurityMicrosoft Active DirectoryPeople ManagementOperations ManagementCommunication SkillsAnalytical SkillsDevOpsWritten communicationComplianceRisk ManagementScripting

Posted 5 days ago
Apply
Apply

📍 United States

🔍 Managed Security Services (MSSP)

  • 3–5 years of experience leading technical teams in a Managed Security Services (MSSP) or service provider environment, with a focus on multi-tenant operations, client service delivery, and team performance.
  • 7–10+ years of experience in network and security engineering, with hands-on expertise in enterprise firewall platforms (Palo Alto, Fortinet, Cisco), SD-WAN, VPNs, secure access service edge (SASE), and edge security solutions (ZTNA, CASB, SWG, DNS security).
  • Minimum of 3 years of experience applying Zero Trust architecture principles across client environments, including identity-aware access controls and segmentation strategies tailored to multi-client infrastructures.
  • Experience supporting secure connectivity and cloud networking for diverse client environments across AWS, Azure, and GCP; familiarity with cloud-native network security tools and hybrid integration patterns.
  • Strong track record of developing repeatable, scalable processes for onboarding clients, implementing security controls, and delivering consistent service levels across accounts.
  • Excellent client-facing communication skills, with a demonstrated ability to translate technical outcomes into business value and coordinate cross-functional teams (SOC, engineering, client success).
  • Familiarity with integrating edge and network telemetry into SIEM/SOAR platforms (e.g., Splunk, Exabeam, Swimlane) to enrich threat detection, support alert triage, and enable managed response workflows.
  • Knowledge of frameworks and compliance mandates relevant to MSSP clients (e.g., NIST CSF, ISO 27001, HIPAA, PCI-DSS, CJIS), and experience aligning network/edge controls to client-specific requirements.
  • Lead a high-performing team of network and secure edge engineers, fostering a culture of accountability, innovation, and collaboration.
  • Relay management and client expectations to team members
  • Coach and mentor technical staff, ensuring skill development and alignment to evolving network security trends and business priorities.
  • Serve as a strategic liaison between Optiv AFC Operations and client stakeholders.
  • Manage client delivery teams, overseeing performance, SLAs, and partnership effectiveness in delivering secure managed services.
  • Consult with clients to proactively incorporate their requirements into the service design
  • Consult with clients to ensure they understand the how the service operates
  • Consult with clients to relay service success stories, service risk, and service outages
  • Partner with sales and practice managers to ensure they clearly understand the service definition and support them as needed in their sales and client management activities
  • Partner with other managers both within the service and in other managed services to build and maintain synergy across functions
  • Matrix resources to other managed security services as needed to ensure success of the overall organization
  • Work through staff to deliver a high quality and predicable service while applying the appropriate leadership style (directing, coaching, supporting, delegating) for the situation
  • Instill a sense of ownership and accountability in team members’ responsibilities
  • Relay success stories, service risk, and service outages to upper management
  • Track, measure and report resource allocation to contribute to effective resource management
  • Tailor communication frequency, context, and format for the intended target audience
  • Establish, document, and enforce operational standards for secure network design, change management, and incident response across hybrid environments.
  • Drive process automation for policy deployment, configuration management, and health monitoring across edge infrastructure.
  • Design, implement, and oversee the execution of quality controls that ensure rigid adherence to processes and procedures
  • Track, measure, and report process and procedure metrics
  • Provide guidance for the integration of secure edge telemetry into incident response workflows and SIEM/SOAR pipelines to enhance detection and investigation.
  • Develop and track operational KPIs, including availability, threat coverage, and performance of network security tools.
  • Own the strategy and implementation of secure edge solutions including SD-WAN, SASE, ZTNA, CASB, SWG, and DNS security.
  • Modernize and secure hybrid network infrastructure, enabling resilient, scalable, and encrypted connectivity across cloud and on-prem environments.
  • Implement Zero Trust networking principles, including identity-aware access, microsegmentation, and least privilege enforcement.
  • Ensure seamless integration of firewalls, VPNs, and secure gateways with identity, cloud, and endpoint security platforms.
  • Ensure technology maintains adequate pace with vendor releases
  • Minimize technology debt by consolidating technology investments into only the essential solutions and leveraging shared technology across managed services where feasible
  • Build and maintain managerial level knowledge of technologies required for service delivery

AWSProject ManagementCiscoCybersecurityGCPMicrosoft ExchangePeople ManagementOperations ManagementFinancial ManagementAzureMentoringLinuxDevOpsComplianceMicrosoft Office SuiteCoachingNetworkingMS OfficeAccount ManagementReportingTrainingClient relationship managementTeam managementScriptingCustomer supportChange ManagementCustomer SuccessBudget management

Posted 11 days ago
Apply
Apply

📍 United States

🔍 Security Operations

  • 2+ years professional experience managing and maintaining observability platforms.
  • 1+ years experience as a Splunk Administrator
  • 2+ years experience as Cribl Administrator
  • Expert-level knowledge of Splunk Enterprise Security
  • Experience with installing and configuring Splunk CORE and Splunk Enterprise Security
  • Knowledge of security logging for Linux, Windows, major EDRs, Firewalls, & Active Directory.
  • Act as a point of escalation for other Engineers and provide guidance and mentoring.
  • Assist with client transition and onboarding serve as primary point of contact for Managed Security Service clients.
  • Implement, configure, and maintain SIEM software and appliance-based products in large enterprise and Government environments.
  • Develop, deploy and tune SIEM content such as correlation rules, dashboards, reports and models.
  • Provide escalation support to Tier 1 for Authorized Support Customers, following processes and interacting appropriately with both customers and partners when required.

AWSSQLCloud ComputingData AnalysisGCPKafkaKubernetesLDAPJiraAzureData engineeringREST APICommunication SkillsCI/CDLinuxDevOpsWritten communicationVerbal communicationTroubleshootingJSONScriptingConfluence

Posted 11 days ago
Apply
Apply

📍 United States

🔍 Security

  • 6+ years of related work experience (Bachelor’s degree preferred, Analyst/Threat Analysis experience preferred)
  • 3+ years of technical architecture experience with Microsoft Sentinel
  • Experienced with multiple security concepts and methods, such as vulnerability assessments, data classification, privacy assessments, incident response, security policy creation, enterprise security strategies, architectures, and governance.
  • Strong understanding of networking (TCP/IP, OSI model), operating system fundamentals (Windows, Linux), and security technologies (endpoint security, DLP, firewalls, IDS/IPS, etc.)
  • Understanding and experience working with application programming/scripting languages (Python, Java, Perl, Shell), as well as Regular Expressions.
  • Experience with cloud-based service architecture
  • Understanding of regulatory requirements and compliance issues affecting clients related to privacy and data protection, such as PCI DSS, GLBA, GDPR, etc.
  • Understanding of various security frameworks and/or methodologies (e.g. MITRE ATT&CK, NIST, etc)
  • Provide mentorship to other technical staff members
  • Provide technical assistance in scoping and other pre-sales activities
  • Take technical leadership on client projects; oversee and guide work performed by other technical staff members.

PythonCloud ComputingCybersecurityAzureLinuxComplianceNetworkingScripting

Posted 12 days ago
Apply
Apply

📍 United States

🔍 Security

  • 2+ years of experience of Cribl Administration
  • 2+ years professional experience managing and maintaining observability platforms.
  • Ability to deal confidently with complex technical problems.
  • Knowledge of security logging for Linux, Windows, major EDRs, Firewalls, & Active Directory.
  • Expertise in delivering large-scale systems using big data technologies including but not limited to: Enterprise-scale Kafka, Splunk, TSDB, etc.
  • Previous experience working with Cloud (AWS, Azure, GCP)
  • The ability to aggregate and analyze logs from various deployed security devices.
  • Experience with various security products/technologies such as: Devo, Chronicle, EDR, XDR, Exabeam, Sentinel, QRadar, Splunk, LogRhythm, Securonix, Elastic, RSA NetWitness, SumoLogic, and infrastructure components such as proxies, firewalls, IDS/IPS, DLP etc.
  • Act as a point of escalation for other Engineers and provide guidance and mentoring.
  • Assist with client transition and onboarding serve as primary point of contact for Managed Security Service clients.
  • Explain and demonstrate how to use observability products to both technical and relatively non-technical personnel.
  • Implement, configure, and maintain SIEM software and appliance-based products in large enterprise and Government environments.
  • Develop, deploy and tune SIEM content such as correlation rules, dashboards, reports, and models.
  • Provide escalation support to Tier 1 for Authorized Support Customers, following processes and interacting appropriately with both customers and partners when required.

AWSBashCloud ComputingElasticSearchGCPKafkaKubernetesJiraAPI testingAzureCI/CDRESTful APIsLinuxDevOpsData visualizationAnsibleScriptingConfluence

Posted 14 days ago
Apply
Apply

📍 United States

🔍 Software Development

  • Experience in SSO/IDP such as (Ping, CyberArk, OAuth, etc.)
  • Experience working with Internal and client Ticketing and Knowledge Base Systems for Incident and Problem tracking as well as procedures. (i.e. Service Now, Jira, Confluence, etc.)
  • Experience in one or more cloud technologies and services, (AWS, Azure, or GCP, etc..)
  • Experience with server administration and patching with Windows/Linux.
  • Basic understanding of server grade applications (DBMS, DNS, SMTP, IIS, SharePoint, Active Directory, Identity Management, Patch Management, LDAP, SQL, AntiVirus)
  • Configuration and maintenance of MSS systems
  • Install and upgrades hardware and software
  • Manage MSS network systems
  • Ensure data security and backup procedures are followed
  • Troubleshoot MSS platform related issues
  • Provide technical support to internal MSS users
  • Help maintain, monitor, and support 3rd party applications
  • Assist with on-prem to cloud migrations for AD, servers, etc.

AWSSQLCloud ComputingElasticSearchGCPKubernetesLDAPAzureCI/CDLinuxTroubleshootingScripting

Posted 24 days ago
Apply
Shown 10 out of 13