Sr Engineer II - SecOps Insider threat

Aristocrat; Gurugram District; On-site; INR 2,500,000 - 4,000,000; Full time

Job summary

Aristocrat seeks a Sr Security Analyst to join our SOC and oversee incident response for high-severity events. You will define and implement detection strategies aligned with MITRE ATT&CK, lead multi-domain investigations, and mentor Tier 1/2 analysts across global teams.

You will also drive process improvements, contribute to playbooks and runbooks, and collaborate with security engineers, IT, and business partners to strengthen overall security posture.

Qualifications

• 8+ years in security operations, incident response, or a blue-team role.
• Bachelor’s degree in Information Systems, Cybersecurity, or related field.
• Advanced certifications such as GCIA, GCIH, GCFA, GCDA, GNFA, GREM, OSCP, MS SC-200 or equivalent are highly regarded.
• Expert knowledge of Windows, Linux, Active Directory, and identity protocols.
• Cloud security monitoring across AWS/Azure/GCP.
• Python or PowerShell for automation and tooling integration.
• Strong understanding of MITRE ATT&CK and IR lifecycle.

Responsibilities

• Lead incident response for high-severity security incidents from scope to recovery.
• Oversee Tier 2 SOC operations, ensuring SLAs and quality standards.
• Define detection strategy aligned to MITRE ATT&CK and cloud telemetry.
• Conduct threat hunts and develop new detections and playbooks.
• Mentor Tier 1/2 analysts and drive skills improvements.
• Coordinate with engineering, IT, and business teams globally.

Skills

Incident response

SOC operations

Threat hunting

MITRE ATT&CK

Python/PowerShell

Detection engineering

Security writesups

Education

Bachelor's degree in Information Security/Cybersecurity

Tools

SIEM

XDR

EDR

SOAR

Job description

At Aristocrat, we are at the forefront of entertainment and technology, pushing boundaries to build world-leading gaming content. Our mission is to bring happiness to life through the power of play, and our culture is built on innovation, creativity, and integrity. As a Sr Security Analyst, you will play a crucial role in our Security Operations Center (SOC), ensuring the safety and integrity of our systems. This is an outstanding opportunity to join a dynamic team, collaborate globally, and drive impactful security initiatives. Your expertise will be instrumental in protecting our assets and supporting our mission to deliver world-class gaming experiences. Join us and be part of an ambitious team that values connection and strives for excellence!

What You'll Do

• Serve as the incident lead for handling and investigating high-severity and complex security incidents from beginning to end. Focus on defining the incident scope, containment, eradication, and recovery phases. Work closely with technical and business partners. Assume responsibility for the root-cause analysis.
• Lead complex, multi-stage investigations across endpoint, identity, network, cloud, and SaaS telemetry, including advanced malware analysis, credential-compromise, and lateral-movement investigations.
• Define detection strategy aligned to MITRE ATT&CK and the organization’s threat model; identify and recommend new detection logic across SIEM, XDR, EDR, and SOAR.
• Conduct threat hunts guided by threat intelligence, emerging TTPs, and gaps in detection coverage; convert findings into new detections, playbooks, and control recommendations.
• Lead Tier 2 SOC operations, ensuring shift priorities, case load, and blocking issue flow meet SLAs and quality standards.
• Build and maintain SOC playbook, runbook, and knowledge-based library; ensure content stays current with tooling and threat changes.
• Identify, build, and recommend process improvements across the SOC, measuring and reporting their impact.
• Chip in to and help implement the multi-year security operations strategy, including detection coverage roadmap, telemetry strategy, automation targets, and capability maturity.
• Interpret security findings as risk-centered advice for security engineering, IT, and business collaborators.
• Mentor and develop Tier 1 and Tier 2 analysts through structured mentoring, investigation walkthroughs, and technical training.
• Participate in cross-functional forums and collaborate with global security teams to ensure a cohesive, consistent approach to security operations.
• Provide senior on-call coverage for major incidents involving blocking issues.

What We're Looking For

• 8+ years in security operations, incident response, detection engineering, or an equivalent blue-team role.
• Bachelor’s degree in Information Systems, Cybersecurity, or a related field, or equivalent experience.
• Advanced certifications such as GCIA, GCIH, GCFA, GCDA, GNFA, GREM, OSCP, Microsoft SC-200 or equivalent are highly regarded.
• Expert knowledge of Windows, Linux, Active Directory, and Entra ID charge techniques; able to reconstruct an intrusion from raw logs without a playbook.
• Strong experience in cloud security monitoring and response across at least one major provider (AWS, Azure, or GCP).
• Proficiency in Python or PowerShell for automation, data analysis, and tooling integration.
• Deep solid understanding of MITRE ATT&CK, the incident response lifecycle, malware analysis, and phishing investigation.
• Track record of defining standards, processes, and playbooks, and of improving them based on evidence.
• Demonstrated ability to mentor analysts and raise the technical bar of a team.
• Clear, structured technical writing, including incident reports, RCAs, and briefings for senior technical and non-technical audiences.
• Strong influencing and teamwork skills; able to work with engineering, IT, and business groups locally and globally to promote change without direct authority.

Esta descripción del puesto puede haber sido revisada y optimizada mediante herramientas de inteligencia artificial con el fin de mejorar su claridad, coherencia e inclusión. En cualquier caso, todo el contenido final, los requisitos del puesto y las decisiones de contratación están sujetos a la revisión y aprobación de Aristocrat.

Filosofía de compensación

Ofrecemos un paquete integral de remuneración y beneficios diseñado para seguir siendo competitivo en el mercado, apoyar tu bienestar y reconocer tu contribución a nuestro éxito. Nuestro enfoque se basa en una filosofía de remuneración por desempeño, recompensando el impacto individual. Tu paquete de compensación específico se determinará en función de factores como tus habilidades, experiencia, cualificaciones y ubicación.

Dependiendo de tu puesto y ubicación, podrás optar a bonificaciones e incentivos anuales, beneficios de salud y bienestar, tiempo libre remunerado, planes de jubilación, cobertura de seguros y otros beneficios locales o establecidos por la legislación aplicable.

Los detalles específicos sobre la compensación y los beneficios para este puesto se tratarán durante el proceso de selección.