Security Operations Analyst II — Tier 2 SOC Investigator

Aristocrat; Nevada; Sur place; USD 90 000 - 130 000; Plein temps

Résumé du poste

Aristocrat is seeking an experienced Security Operations Analyst (Tier 2) to join our Security Operations Center in Nevada. You will own MSSP incidents, investigate IOCs across endpoints, identity, network and cloud data, and drive containment and remediation within playbooks.

You will build SIEM queries, tune detections, and document cases to QA standards, while supporting threat hunts and on-call rotations.

Qualifications

• 2+ years in SOC or security operations with incident ownership.
• Bachelor's degree in information systems, cybersecurity, or related field.
• Experience with CrowdStrike and EDR/live response.
• Familiarity with MITRE ATT&CK mappings and cloud monitoring.

Responsabilités

• Own MSSP customer concerns and medium/high-severity alerts from start to finish.
• Investigate IOCs across endpoint, identity, network, and cloud data.
• Triage phishing, malware, and credential-compromise investigations.
• Contain and remediate per playbooks; document actions taken.
• Build and run queries across SIEM, EDR, SOAR for investigations and reporting.
• Identify tuning gaps; flag false positives; test detection changes.
• Document cases to high QA standard and accept feedback.
• Support threat hunts and incident response from detection to RCA.
• Contribute to playbooks, runbooks, and knowledge base improvements.
• Participate in 24x7 rotating shift roster, including on-call and weekends.

Connaissances

SOC operations

CQL / SIEM queries

EDR live response

Windows / Linux / AD

MITRE ATT&CK

Cloud security monitoring

Scripting (Python / PowerShell)

SOAR / automation

Threat hunting

Formation

Bachelor's degree in information systems / cybersecurity

Outils

CrowdStrike

SIEM tooling (KQL/SPL)

EDR tooling

SOAR platforms

Cloud platforms (AWS/Azure/GCP)

Description du poste

Aristocrat is seeking an experienced Security Operations Analyst (Tier 2) to join our Security Operations Center in Nevada. You will own MSSP incidents, investigate IOCs across endpoints, identity, network and cloud data, and drive containment and remediation within playbooks.

You will build SIEM queries, tune detections, and document cases to QA standards, while supporting threat hunts and on-call rotations.