Aristocrat ir globāls spēļu un izklaides uzņēmums, kas izstrādā kazino spēles, mobilās spēles un tiešsaistes azartspēļu pieredzi par reālu naudu. Uzņēmuma darbība aptver regulētu sauszemes spēļu nozari, mobilo spēļu izdošanu un regulētas tiešsaistes spēles, apvienojot tehnoloģijas, radošo izstrādi un inovācijas. Pievēršoties atbildīgai spēlēšanai un ilgtspējai, Aristocrat ar lielas starptautiskas komandas atbalstu apkalpo spēlētāju kopienu visā pasaulē.
Senior SecOps Engineer, Insider Threat
Lead incident response, threat hunting, and detection engineering for Aristocrat’s global gaming technology. Oversee Tier 2 SOC operations and mentor security analysts.
Apraksts
- Lead complex, high-severity security incidents through resolution
- Set incident scope and guide containment, eradication, and recovery
- Investigate root causes with technical and business partners
- Direct investigations across endpoint, identity, network, cloud, and SaaS data
- Analyze malware and investigate credential compromise and lateral movement
- Set detection strategy based on MITRE ATT&CK and the organization’s threat model
- Recommend detection logic for SIEM, XDR, EDR, and SOAR platforms
- Hunt for threats using intelligence, emerging techniques, tactics and procedures, and coverage gaps
- Turn hunt findings into detections, playbooks, and control recommendations
- Run Tier 2 SOC operations and manage priorities, workloads, escalations, service levels, and quality
- Develop and maintain SOC playbooks, runbooks, and knowledge resources
- Improve SOC processes and report on the impact of changes
- Help deliver the multi-year security operations strategy across detection coverage, telemetry, automation, and capability maturity
- Advise security engineering, IT, and business teams on risk
- Coach and develop Tier 1 and Tier 2 analysts
- Contribute to cross-functional forums and work with global security teams
- Provide senior on-call support for major incidents and escalations
Prasības
- At least 8 years in security operations, incident response, detection engineering, or a comparable blue-team role
- Bachelor’s degree in Information Systems, Cybersecurity, or a related discipline, or equivalent experience
- Advanced certifications such as GCIA, GCIH, GCFA, GCDA, GNFA, GREM, OSCP, or Microsoft SC-200 are valued
- Expert knowledge of Windows, Linux, Active Directory, and Entra ID attack techniques
- Able to reconstruct an intrusion from raw logs without relying on a playbook
- Strong cloud security monitoring and response experience with at least one major provider: AWS, Azure, or GCP
- Proficient in Python or PowerShell for automation, data analysis, and tool integration
- Deep understanding of MITRE ATT&CK, incident response, malware analysis, and phishing investigations
- Demonstrated success defining standards, processes, and playbooks and improving them based on evidence
- Able to mentor analysts and strengthen a team’s technical capabilities
- Writes clear, structured technical material, including incident reports, root-cause analyses, and briefings for technical and non-technical senior audiences
- Can work with local and global engineering, IT, and business groups to advance change without direct authority
Priekšrocības
- Annual bonuses and incentives may be offered, depending on role and location
- Health and wellbeing benefits may be offered, depending on role and location
- Paid leave may be offered, depending on role and location
- Retirement plans may be offered, depending on role and location
- Insurance coverage may be offered, depending on role and location
- Other local or statutory benefits may be offered, depending on role and location
- Comprehensive compensation and benefits package
- Performance-based compensation approach