Cyber Operations Advisor

Role Overview

• Independently lead multiple technical engagements simultaneously, ensuring timely delivery of measurable security outcomes and operational improvements across client environments
• Convert client business requirements into actionable technical strategies and capabilities that align with security objectives and deliver measurable value
• Collaborate with internal teams and clients to design strategic roadmaps and execute plans that advance operational maturity and security posture
• Drive service maturity by analyzing KPIs, SLAs, and performance trends to deliver actionable insights and continuous value improvements
• Evaluate and align security solutions and recommendations with client requirements, risk profiles, and strategic objectives to ensure optimal fit and effectiveness
• Assist in the documentation of business requirements, use cases, and ROI analyses to support informed decision-making and demonstrate value
• Act as a technical advisor during pre-sales and post-sales engagements, ensuring solution alignment and client confidence
• Provide technical expertise for proposals, contracts, and service descriptions to ensure accuracy and alignment with client needs
• Recognize and recommend cross-sell and up-sell opportunities across AFC services
• Lead or support security initiatives from planning through execution
• Apply hands-on expertise to operationalize threat intelligence across EDR, SIEM, SOAR, and related domains, improving detection and response capabilities
• Analyze patterns and anomalies to identify potential advanced threats and recommend proactive mitigation strategies
• Conduct architectural reviews and provide recommendations to strengthen security, posture and operational efficiency
• Assess and recommend custom detection logic, automation, or tool enhancements to address evolving threats and operational needs
• Assist with platform configurations, detection logic, automation improvements
• Build and develop relationships with internal and external stakeholders
• Identify and assess project risks, developing mitigation strategies to ensure successful delivery and minimize impact
• Validate project scope and deliverables to ensure alignment with client expectations and contractual obligations
• Represent Optiv in client meetings, delivering clear technical guidance and executive-level communication
• Collaborate with team members to identify issues, develop strategies, and drive continuous improvement
• Provide support for projects spanning multiple functional groups by identifying collaborative opportunities, enhancing existing deliverables, and strengthening Optiv’s value to our clients
• Ensure projects are delivered on time, within budget, and to quality standards, meeting or exceeding client expectations

Requirements

• Bachelor’s degree (or equivalent experience) and a minimum of 8 years in cybersecurity operations, with proven advisory and leadership responsibilities
• Demonstrated success in leading client-facing engagements and managing strategic security programs in professional services or consulting settings
• Advanced analytical skills with the ability to interpret complex data and translate insights into actionable security strategies
• In-depth knowledge of SOC operations, threat analysis methodologies, risk assessment practices, and incident response frameworks
• Google SecOps (SIEM/SOAR) expertise in driving maturity of the platform for detection engineering, incident response & automation efforts. Ideal candidate has worked with several SIEM/SOAR technologies and can advise on implementation best practices.
• CrowdStrike: 2-3 years hands-on experience helping manage CS platform and implementation.
• Ability to identify gaps in coverage, create & manage detection and prevention policies, and create appropriate reporting to highlight platform health.
• Help refine and strengthen our vulnerability management practices.
• Advise on identity management strategies to ensure secure and efficient access controls.
• Explore opportunities to expand and optimize automation in patch management processes.
• Swimlane experience identifying automation opportunities and advising on platform integration efforts to streamline security operations.
• Hands on experience and in depth understanding of platform management processes including, but not limited to: EDR, Vuln Management, SIEM, SOAR, Identity, Network, and Perimeter tooling
• Comprehensive understanding of NIST CSF, MITRE ATT&CK, and key regulatory frameworks such as PCI, SOC 2, and ISO 27001
• Senior-level security certifications preferred, such as CISSP, CISM, or GCIH (or equivalent)
• Exceptional communication skills, including the ability to craft and deliver executive-level reports and compelling security narratives
• Proven ability to establish trust and maintain strong relationships with senior client stakeholders and cross-functional internal teams
• Expertise in cloud security across AWS, Azure, and GCP, with working knowledge of virtualization and containerization technologies
• Working knowledge of project management methodologies (Agile, Scrum, PMI) and experience driving security initiatives
• Familiarity with common Large Language Models and their impact on Security Operations
• Preferred experience in security architecture, risk mitigation, disaster recovery planning, compliance testing, data loss prevention, and network security strategies, with familiarity in ITIL, COBIT, ISO standards, PCI, and SOX
• Skilled in addressing client inquiries and resolving issues with professionalism and clarity
• Proficient in creating presentations and technical content that adhere to organizational standards and effectively communicate complex concepts.

Tech Stack

• AWS
• Azure
• Cloud
• Cyber Security
• Google Cloud Platform

Benefits

• Work/life balance
• Professional training resources
• Creative problem-solving and the ability to tackle unique, complex projects
• Volunteer Opportunities.