Teams at Optiv

Architect and administer Cribl-based data routing infrastructure across cloud and on-premises environments. Build pipelines to parse, enrich, normalize, mask, and reduce machine data before routing it to observability and security platforms. Monitor performance, manage GitOps configurations, upgrades, troubleshooting, dashboards, and license usage. Collaborate with SOC and DevOps teams, provide replay-strategy guidance, and support scheduled shifts and on-call operations.

Provides 24/7 managed detection and response support for client SIEM environments. Responsibilities include onboarding and maintaining SIEM systems, responding to client configuration issues, implementing security solutions, developing security content and reporting, advising clients, supporting multiple security products, mentoring junior engineers, conducting knowledge transfers, and participating in on-call rotations. The role requires LogRhythm expertise, network security knowledge, client-facing consulting experience, and flexibility for rotating shifts.

Lead Splunk SIEM operations, prioritize client work, configure and implement SIEM platforms, develop detections and reporting, tune content, support onboarding, provide consulting and training, and mentor junior engineers. The role includes escalation support, process improvement, client interaction, knowledge transfer, and rotating day, mid, and night shifts for 24/7 managed services.