Aristocrat je globalno podjetje na področju iger in zabave, ki ustvarja igralniške igre, mobilne naslove ter spletne igralne izkušnje z resničnim denarjem. Njegovo delovanje zajema regulirane kopenske igre, izdajanje mobilnih iger in regulirane spletne igre ter združuje tehnologijo, ustvarjalni razvoj in inovacije. Z osredotočenostjo na odgovorno igranje in trajnost Aristocrat podpira svetovno skupnost igralcev z veliko mednarodno ekipo.
Senior SecOps Engineer, Insider Threat
Lead incident response, threat hunting, and detection engineering for Aristocrat’s global gaming technology. Oversee Tier 2 SOC operations and mentor security analysts.
Opis
- Lead complex, high-severity security incidents through resolution
- Set incident scope and guide containment, eradication, and recovery
- Investigate root causes with technical and business partners
- Direct investigations across endpoint, identity, network, cloud, and SaaS data
- Analyze malware and investigate credential compromise and lateral movement
- Set detection strategy based on MITRE ATT&CK and the organization’s threat model
- Recommend detection logic for SIEM, XDR, EDR, and SOAR platforms
- Hunt for threats using intelligence, emerging techniques, tactics and procedures, and coverage gaps
- Turn hunt findings into detections, playbooks, and control recommendations
- Run Tier 2 SOC operations and manage priorities, workloads, escalations, service levels, and quality
- Develop and maintain SOC playbooks, runbooks, and knowledge resources
- Improve SOC processes and report on the impact of changes
- Help deliver the multi-year security operations strategy across detection coverage, telemetry, automation, and capability maturity
- Advise security engineering, IT, and business teams on risk
- Coach and develop Tier 1 and Tier 2 analysts
- Contribute to cross-functional forums and work with global security teams
- Provide senior on-call support for major incidents and escalations
Zahteve
- At least 8 years in security operations, incident response, detection engineering, or a comparable blue-team role
- Bachelor’s degree in Information Systems, Cybersecurity, or a related discipline, or equivalent experience
- Advanced certifications such as GCIA, GCIH, GCFA, GCDA, GNFA, GREM, OSCP, or Microsoft SC-200 are valued
- Expert knowledge of Windows, Linux, Active Directory, and Entra ID attack techniques
- Able to reconstruct an intrusion from raw logs without relying on a playbook
- Strong cloud security monitoring and response experience with at least one major provider: AWS, Azure, or GCP
- Proficient in Python or PowerShell for automation, data analysis, and tool integration
- Deep understanding of MITRE ATT&CK, incident response, malware analysis, and phishing investigations
- Demonstrated success defining standards, processes, and playbooks and improving them based on evidence
- Able to mentor analysts and strengthen a team’s technical capabilities
- Writes clear, structured technical material, including incident reports, root-cause analyses, and briefings for technical and non-technical senior audiences
- Can work with local and global engineering, IT, and business groups to advance change without direct authority
Ugodnosti
- Annual bonuses and incentives may be offered, depending on role and location
- Health and wellbeing benefits may be offered, depending on role and location
- Paid leave may be offered, depending on role and location
- Retirement plans may be offered, depending on role and location
- Insurance coverage may be offered, depending on role and location
- Other local or statutory benefits may be offered, depending on role and location
- Comprehensive compensation and benefits package
- Performance-based compensation approach