Security Operations Analyst II - MSSP SOC Growth

aristocrat; Las Vegas (NV); In loco; USD 90.000 - 120.000; Tempo pieno

Descrizione del lavoro

Aristocrat seeks a skilled Security Operations Analyst (Tier 2) to join our SOC. You will own MSSP incidents, investigate across endpoints, identities, networks and cloud, and drive containment per playbooks.

The role entails 24x7 rotating shifts and collaboration with global teams, with mentoring to advance your security career. You will build queries across SIEM, EDR, and SOAR, tune detections, and contribute to playbooks and knowledge bases.

Competenze

• 2+ years in SOC/security operations with investigations beyond triage.
• Bachelor's degree in information systems, cybersecurity, or equivalent.
• Experience with CrowdStrike, SIEM queries (KQL/SPL), and EDR.
• Proficient in Windows, Linux, and AD/Entra ID log analysis.
• Knowledge of MITRE ATT&CK and incident response processes.
• Nice to have: Security+, CCSE/SSCP, Microsoft SC-200, CySA+ certifications.

Mansioni

• Own MSSP customer concerns and medium/high-severity alerts from start to finish.
• Review MSSP triage for quality and provide tuning recommendations.
• Triage phishing, malware, and credential-compromise investigations.
• Contain and remediate per playbooks: host isolation, credential reset, IOC blocking.
• Document cases with hypothesis, evidence, actions, and risk; support QA reviews.
• Build and run queries across SIEM/EDR/SOAR to support investigations.
• Identify detection/tuning gaps and test changes from the detection engineering team.
• Assist threat hunts and incident response from detection to RCA.
• Contribute to playbooks and knowledge bases from casework.

Conoscenze

SOC operations

Investigation ownership

Phishing analysis

Malware analysis

Cloud security monitoring

Scripting (Python/PowerShell)

Formazione

Bachelor's degree in information systems or cybersecurity

Equivalent experience

Strumenti

CrowdStrike

EDR

SIEM

SOAR

Descrizione del lavoro

Aristocrat seeks a skilled Security Operations Analyst (Tier 2) to join our SOC. You will own MSSP incidents, investigate across endpoints, identities, networks and cloud, and drive containment per playbooks.

The role entails 24x7 rotating shifts and collaboration with global teams, with mentoring to advance your security career. You will build queries across SIEM, EDR, and SOAR, tune detections, and contribute to playbooks and knowledge bases.