Senior Cyber Defense Operations Analyst

Epic Games • Cary, NC

2d

About The Position

Epic Games’ Security Operations Center protects its player community and the people, infrastructure, and technology that support it. The Senior Cyber Defense Operations Analyst leads security investigations and incident response while helping modernize SOC operations by converting repeatable analysis into automated, AI-assisted workflows. The role spans cloud, corporate, endpoint, identity, and production environments and includes coordinating incident response, improving detection quality, assessing emerging threats, and raising investigation standards.

Requirements

• At least 5 years of experience in security operations, incident response, or threat detection, including leading investigations end-to-end.
• Deep hands-on experience with SIEM and EDR platforms and writing effective queries and detections.
• Strong understanding of attacker tradecraft and frameworks such as MITRE ATT&CK, with the ability to reconstruct activity from logs and telemetry.
• Experience investigating cloud environments (AWS and/or GCP), SaaS, and identity platforms.
• Scripting or programming skills, such as Python, and motivation to automate repetitive work.
• Curiosity about AI and emerging technology, and interest in applying them responsibly to security operations.
• Calm, decisive judgment under pressure; ability to prioritize competing incidents and communicate clearly with technical and executive audiences.
• Strong written communication and high standards for incident documentation and reporting.
• Self-directed, ownership-driven approach and willingness to challenge established practices.

Nice To Haves

• SOAR experience.

Responsibilities

• Lead triage, investigation, and response for security alerts and incidents across cloud, corporate, endpoint, identity, and production environments.
• Serve as an escalation point and incident lead, coordinating with engineering, legal, privacy, and business partners through containment, remediation, and post-incident review.
• Manage the detection lifecycle by developing, tuning, and retiring detection logic to improve signal-to-noise ratio, reduce alert fatigue, and address emerging threat gaps.
• Identify recurring analyst work and partner with security engineering to automate it, including AI-agent workflows with appropriate validation and human review.
• Translate threat intelligence and emerging vulnerabilities into rapid exposure assessments and actionable company-wide response.
• Develop and maintain playbooks, runbooks, and operational metrics to improve SOC speed, consistency, and scalability.
• Set and elevate investigation and case-documentation standards, coach analysts, and hold managed-service partners accountable to rigorous SLAs and analytical depth.

Benefits

• Company-paid medical, dental, and vision HRA coverage, with 100% of premiums paid for employees and dependents.
• Long-term disability insurance.
• Life insurance.
• 401(k) with competitive match.
• Mental well-being program through Modern Health, including free therapy and coaching for employees and dependents.
• Company events and company-wide paid breaks.
• Unlimited PTO and sick time.
• Paid sabbatical after 7 years of employment.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed