Aristocrat
Aristocrat
Aristocrat is a global gaming and entertainment company creating casino games, mobile titles, and online real-money gaming experiences. Its work spans regulated land-based gaming, mobile game publishing, and regulated online gaming, bringing together technology, creative development, and innovation. With a focus on responsible gameplay and sustainability, Aristocrat supports a worldwide player community through a large international team.

Senior SecOps Engineer, Insider Threat

Lead incident response, threat hunting, and detection engineering for Aristocrat’s global gaming technology. Oversee Tier 2 SOC operations and mentor security analysts.

Description

  • Lead complex, high-severity security incidents through resolution
  • Set incident scope and guide containment, eradication, and recovery
  • Investigate root causes with technical and business partners
  • Direct investigations across endpoint, identity, network, cloud, and SaaS data
  • Analyze malware and investigate credential compromise and lateral movement
  • Set detection strategy based on MITRE ATT&CK and the organization’s threat model
  • Recommend detection logic for SIEM, XDR, EDR, and SOAR platforms
  • Hunt for threats using intelligence, emerging techniques, tactics and procedures, and coverage gaps
  • Turn hunt findings into detections, playbooks, and control recommendations
  • Run Tier 2 SOC operations and manage priorities, workloads, escalations, service levels, and quality
  • Develop and maintain SOC playbooks, runbooks, and knowledge resources
  • Improve SOC processes and report on the impact of changes
  • Help deliver the multi-year security operations strategy across detection coverage, telemetry, automation, and capability maturity
  • Advise security engineering, IT, and business teams on risk
  • Coach and develop Tier 1 and Tier 2 analysts
  • Contribute to cross-functional forums and work with global security teams
  • Provide senior on-call support for major incidents and escalations

Requirements

  • At least 8 years in security operations, incident response, detection engineering, or a comparable blue-team role
  • Bachelor’s degree in Information Systems, Cybersecurity, or a related discipline, or equivalent experience
  • Advanced certifications such as GCIA, GCIH, GCFA, GCDA, GNFA, GREM, OSCP, or Microsoft SC-200 are valued
  • Expert knowledge of Windows, Linux, Active Directory, and Entra ID attack techniques
  • Able to reconstruct an intrusion from raw logs without relying on a playbook
  • Strong cloud security monitoring and response experience with at least one major provider: AWS, Azure, or GCP
  • Proficient in Python or PowerShell for automation, data analysis, and tool integration
  • Deep understanding of MITRE ATT&CK, incident response, malware analysis, and phishing investigations
  • Demonstrated success defining standards, processes, and playbooks and improving them based on evidence
  • Able to mentor analysts and strengthen a team’s technical capabilities
  • Writes clear, structured technical material, including incident reports, root-cause analyses, and briefings for technical and non-technical senior audiences
  • Can work with local and global engineering, IT, and business groups to advance change without direct authority

Benefits

  • Annual bonuses and incentives may be offered, depending on role and location
  • Health and wellbeing benefits may be offered, depending on role and location
  • Paid leave may be offered, depending on role and location
  • Retirement plans may be offered, depending on role and location
  • Insurance coverage may be offered, depending on role and location
  • Other local or statutory benefits may be offered, depending on role and location
  • Comprehensive compensation and benefits package
  • Performance-based compensation approach

Related Jobs

Patrianna

DevOps Engineering Manager (Remote, Poland)

Patrianna
51 – 200 Employees
ConsultingGamingMarketing

Lead Site Reliability and Platform Engineering for Patrianna’s global B2B iGaming platform. Guide reliable infrastructure, Kubernetes and cloud operations, and AI-enabled engineering delivery.

Open