Aristocrat este o companie globală de jocuri și divertisment care creează jocuri de cazino, titluri pentru dispozitive mobile și experiențe de joc online cu bani reali. Activitatea sa acoperă jocurile reglementate desfășurate în locații fizice, publicarea de jocuri pentru dispozitive mobile și jocurile online reglementate, reunind tehnologia, dezvoltarea creativă și inovația. Punând accent pe jocul responsabil și sustenabilitate, Aristocrat sprijină o comunitate globală de jucători prin intermediul unei echipe internaționale numeroase.
Senior SecOps Engineer, Insider Threat
Lead incident response, threat hunting, and detection engineering for Aristocrat’s global gaming technology. Oversee Tier 2 SOC operations and mentor security analysts.
Descriere
- Lead complex, high-severity security incidents through resolution
- Set incident scope and guide containment, eradication, and recovery
- Investigate root causes with technical and business partners
- Direct investigations across endpoint, identity, network, cloud, and SaaS data
- Analyze malware and investigate credential compromise and lateral movement
- Set detection strategy based on MITRE ATT&CK and the organization’s threat model
- Recommend detection logic for SIEM, XDR, EDR, and SOAR platforms
- Hunt for threats using intelligence, emerging techniques, tactics and procedures, and coverage gaps
- Turn hunt findings into detections, playbooks, and control recommendations
- Run Tier 2 SOC operations and manage priorities, workloads, escalations, service levels, and quality
- Develop and maintain SOC playbooks, runbooks, and knowledge resources
- Improve SOC processes and report on the impact of changes
- Help deliver the multi-year security operations strategy across detection coverage, telemetry, automation, and capability maturity
- Advise security engineering, IT, and business teams on risk
- Coach and develop Tier 1 and Tier 2 analysts
- Contribute to cross-functional forums and work with global security teams
- Provide senior on-call support for major incidents and escalations
Cerințe
- At least 8 years in security operations, incident response, detection engineering, or a comparable blue-team role
- Bachelor’s degree in Information Systems, Cybersecurity, or a related discipline, or equivalent experience
- Advanced certifications such as GCIA, GCIH, GCFA, GCDA, GNFA, GREM, OSCP, or Microsoft SC-200 are valued
- Expert knowledge of Windows, Linux, Active Directory, and Entra ID attack techniques
- Able to reconstruct an intrusion from raw logs without relying on a playbook
- Strong cloud security monitoring and response experience with at least one major provider: AWS, Azure, or GCP
- Proficient in Python or PowerShell for automation, data analysis, and tool integration
- Deep understanding of MITRE ATT&CK, incident response, malware analysis, and phishing investigations
- Demonstrated success defining standards, processes, and playbooks and improving them based on evidence
- Able to mentor analysts and strengthen a team’s technical capabilities
- Writes clear, structured technical material, including incident reports, root-cause analyses, and briefings for technical and non-technical senior audiences
- Can work with local and global engineering, IT, and business groups to advance change without direct authority
Beneficii
- Annual bonuses and incentives may be offered, depending on role and location
- Health and wellbeing benefits may be offered, depending on role and location
- Paid leave may be offered, depending on role and location
- Retirement plans may be offered, depending on role and location
- Insurance coverage may be offered, depending on role and location
- Other local or statutory benefits may be offered, depending on role and location
- Comprehensive compensation and benefits package
- Performance-based compensation approach