Sr. Analyst - Attack Surface Management

GamblingCareers.com; Kraków; On-site; PLN 180,000 - 280,000; Full time

Job summary

Aristocrat is seeking a Sr. Analyst - Attack Surface Management to strengthen our external security posture. You will lead reconnaissance projects and apply vulnerability management skills to protect our systems.

Mentor junior analysts, implement automation for monitoring, conduct risk assessments, and communicate risks to leadership. Required: OSINT, Kali Linux, Burp Suite, Tenable, Splunk, and cloud security with Azure and GCP. AI models experience is a plus.

Qualifications

• 4+ years in cybersecurity focusing on security operations or offensive security.
• Advanced knowledge of vulnerability management, OSINT, and adversary simulation.
• Experience in cloud security assessment (Azure, GCP) and AI model tooling.

Responsibilities

• Lead attack surface reconnaissance and asset identification.
• Manage a portion of the vulnerability management program, including onboarding new assets.
• Perform in-depth analysis of vulnerabilities and provide risk assessments.
• Apply penetration testing techniques to validate security gaps.
• Mentor juniors and contribute to process improvements.

Skills

Vulnerability management

OSINT

Adversary simulation

Kali Linux

Burp Suite

Tenable

Splunk

Azure

GCP

AI models

Tools

Kali Linux

Burp Suite

Tenable

Splunk

Job description

Aristocrat aims to bring happiness to life through the power of play. As a Sr. Analyst - Attack Surface Management, you will guide this effort. Join our creative and upbeat team where your skills will be vital in protecting our external assets. You will collaborate with various teams to establish premier security measures that strongly benefit our organization.

In this role, you will lead sophisticated reconnaissance projects and apply your vulnerability management skills to keep our systems secure. Your work will directly support our dedication to responsible gameplay and corporate governance, encouraging a better, brighter future full of play. If you are bold and enjoy working with others, this position offers an outstanding chance to excel and grow within a global leader in gaming content and technology.

What You'll Do

• Lead efforts in attack surface reconnaissance and asset identification.
• Manage a portion of the vulnerability management program, including onboarding new assets.
• Conduct in-depth analysis of security vulnerabilities and provide sophisticated risk assessments.
• Apply penetration testing techniques to validate and exploit security gaps.
• Mentor junior analysts and contribute to process improvements.
• Implement automation for attack surface monitoring using scripting and cloud-based solutions.
• Research emerging threats and implement countermeasures accordingly.
• Communicate risks and mitigation strategies to executive leadership.

What We're Looking For

• Advanced knowledge of vulnerability management, OSINT, and adversary simulation.
• Strong expertise with tools like Kali Linux, Burp Suite, Tenable, and Splunk.
• Experience in cloud security assessment, particularly with Azure and GCP.
• Experienced with existing and new AI Models
• Understanding of regulatory frameworks such as ISO27001.
• More than 4 demonstrated experience in cybersecurity concentrating on security operations or offensive security.

Compensation Philosophy

We offer a comprehensive pay and benefits package designed to stay competitive in the market, support your wellbeing, and recognise your contribution to our success. Our approach is underpinned by a pay-for-performance belief in rewarding individual impact. Your specific compensation package will be determined by factors such as your skills, experience, qualifications, and location.

Depending on your role and location, you may be eligible for annual bonuses and incentives, health and wellbeing benefits, paid time off, retirement plans, insurance coverage, and other local or statutory benefits.

Specific details about compensation and benefits for this position will be discussed during the recruitment process.