Security Operations Analyst (Tier 2)

Aristocrat Gaming • Las Vegas, NV

3d

About The Position

Aristocrat is seeking a Security Operations Analyst (Tier 2) to join its Security Operations Center and help protect the company’s digital assets. The position involves investigating and resolving security alerts and customer concerns, working with MSSP partners, and contributing to a modern SOC environment with global collaboration and structured mentoring.

The analyst owns medium- and high-severity investigations from initial scope through defensible conclusions, containment, remediation, and documentation. The role also supports threat hunting and incident response, improves detection quality and operational playbooks, and uses SIEM, EDR, SOAR, and MSSP tooling for investigations and reporting. The position participates in a 24x7 rotating shift roster, including on-call and occasional weekend coverage.

Aristocrat offers a comprehensive pay and benefits package intended to be competitive, support wellbeing, and recognize individual contribution. Compensation depends on factors including skills, experience, qualifications, and location. Depending on role and location, employees may be eligible for annual bonuses and incentives, health and wellbeing benefits, paid time off, retirement plans, insurance coverage, and other local or statutory benefits. Specific compensation and benefits details will be discussed during recruitment.

Requirements

• At least 2 years of hands-on SOC or security operations experience, including ownership of investigations beyond initial triage.
• A bachelor's degree in information systems, cybersecurity, or a related field, or equivalent experience.
• Proficiency querying CrowdStrike Query Language (CQL) or transferable SIEM query experience such as KQL or SPL.
• Hands-on EDR experience, including live response, process-tree analysis, and host isolation.
• Working knowledge of Windows, Linux, and Active Directory or Entra ID attack patterns.
• Ability to read authentication, process, and network logs without relying on a playbook.
• Solid understanding of the incident-response process, phishing and malware investigations, and MITRE ATT&CK mapping of observed behavior.

Nice To Haves

• Security+, ISC2 SSCP, Microsoft SC-200, CrowdStrike CCFA or CCFR, Blue Team Level 1 or 2 (BTL1/BTL2), GCIA, GCIH, or CySA+ certification.
• Cloud security monitoring experience with AWS, Azure, or GCP.
• Scripting experience with Python or PowerShell.
• Experience with SOAR or automation.
• Exposure to detection tuning or threat hunting.

Responsibilities

• Own MSSP customer concerns and medium- and high-severity alerts from start to finish, scoping activity, building timelines, identifying indicators of compromise, and investigating endpoint, identity, network, and cloud data.
• Review samples of MSSP triage for quality and provide feedback on tuning, detection gaps, and escalation criteria.
• Triage phishing, malware, and credential-compromise investigations, including header analysis, sandboxing, and static malware analysis.
• Complete containment and remediation within approved playbooks, including host isolation, account disablement, credential resets, and IOC blocking, and record all actions taken.
• Escalate issues to senior specialists with the hypothesis, evidence, actions taken, current risk, and a specific request; return well-understood benign patterns to the MSSP with a detailed disposition and any missing playbook step.
• Build and run queries across SIEM, EDR, SOAR, and MSSP tooling to support investigations and reporting.
• Identify detection and tuning gaps, flag false positives, and propose evidence-supported tuning, suppression, or enrichment.
• Test and validate detection changes delivered by the detection engineering team.
• Document each case accurately, completely, and reproducibly; accept peer and lead QA review and act on feedback within the same cycle.
• Support specialist-led threat hunts and incident response through evidence gathering and technical analysis from detection through root cause analysis.
• Contribute improvements to playbooks, runbooks, and knowledge bases based on casework.
• Participate in the 24x7 rotating shift roster, including on-call and occasional weekend coverage.

Benefits

• Comprehensive pay and benefits package.
• May be eligible, depending on role and location, for annual bonuses and incentives, health and wellbeing benefits, paid time off, retirement plans, insurance coverage, and other local or statutory benefits.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level