Security Operations Centre Specialist

Risk.Inc; United States; Remote; USD 80,000 - 120,000; Full time

Benefits offered by this job

Children Allowance

Mental Health Support

Sport Activities

Language Courses

Automotive Services

Veterinary Services

Home Office Setup Assistance

Dental Services

Books and Stationery

Training Compensation

Massage

Job summary

RISK inc is seeking an experienced SOC professional to lead daily security operations, analyze incidents, and respond to threats across on-premises and cloud environments. The role requires hands-on DDoS mitigation, SIEM tuning, and a proactive Threat Hunting mindset.

You will work with diverse teams to strengthen security controls, automate routine tasks, and drive improvements in detection accuracy and incident response processes.

Qualifications

• Proven hands-on experience in SOC operations, security incident detection, analysis and response.
• Strong experience identifying and mitigating DoS/DDoS attack vectors (SYN floods, UDP amplification, HTTP floods, DNS reflection).
• Practical experience with DDoS mitigation solutions (Cloudflare, Akamai Prolexic, AWS Shield, Radware, Imperva, Arbor).
• Hands-on experience with SIEM platforms (detection rule creation, configuration, tuning).
• Experience with EDR and DLP solutions, alert monitoring and incident response.
• Experience securing cloud environments (AWS, Azure, Google Workspace).
• Strong scripting and automation skills (Python, Bash, PowerShell).
• Proven ability to reduce False Positives and optimize detection logic.
• Solid understanding of TCP/IP, UDP, DNS, SSH, SSL/TLS, HTTP protocols and cyberattack techniques.
• Experience with Windows and Linux/Unix systems.
• Threat Hunting experience and data-driven incident investigation.
• Analytical and problem-solving mindset with a data-driven approach.

Responsibilities

• Manage and support daily SOC operations, including incident analysis and response.
• Monitor alerts, conduct Threat Hunting, and determine incident response actions.
• Detect and mitigate DoS/DDoS attacks across L3-L7 layers.
• Configure and optimize SIEM, EDR, DLP, and DDoS protection solutions.
• Improve detection accuracy by reducing False Positives.
• Monitor cloud environments (AWS, Azure, Google Workspace) for threats.
• Develop automation scripts to streamline SOC tasks.
• Investigate incidents, document findings, and provide remediation recommendations.
• Assess new systems for security compliance and best practices.
• Collaborate with IT and Security teams to strengthen controls.

Skills

SOC operations

DDoS mitigation

SIEM

EDR & DLP

Cloud security

Scripting

Threat Hunting

Networking basics

Windows/Linux

Python

Education

Bachelor's degree in a related field

Tools

Cloudflare

Akamai Prolexic

AWS Shield

Radware

Imperva

Arbor Networks

Splunk

Job description

Location: Ukraine

Company Description:

RISK inc: An International iGaming Company Pushing the Boundaries of Entertainment

Who We Are:

An international iGaming company specializing in identifying and fostering the growth of high-potential entertainment markets. With 1000+ professionals in 20+ locations, we operate in 10 countries, serving over 300,000 customers.

Always Pushing the Boundaries? You Already Belong at RISK!

Our global-scale operations are based on strong internal expertise, analytics, and data research. We have expertise in iGaming operations (sports betting, online casino), digital and affiliate marketing, tech solutions, and data analytics.

Requirements:

• Proven hands-on experience in SOC operations, security incident detection, analysis, and response;
• Strong experience identifying and mitigating various DoS/DDoS attack vectors, including SYN floods, UDP amplification, HTTP/HTTP2 floods, DNS reflection, and slow-and-low attacks;
• Practical experience with DDoS mitigation solutions such as Cloudflare, Akamai Prolexic, AWS Shield, Radware, Imperva, Arbor Networks, or similar WAF/Anti-DDoS technologies;
• Hands-on experience with SIEM platforms, including detection rule creation, configuration, tuning, and optimization;
• Practical experience working with EDR and DLP solutions, including security alert monitoring, investigation, and incident response;
• Experience securing cloud environments and investigating security incidents across AWS, Azure, and Google Workspace;
• Strong scripting and automation skills using Python, Bash, or PowerShell to improve SOC operations;
• Proven experience reducing False Positives and optimizing detection logic to improve alerting accuracy and operational efficiency;
• Solid understanding of network and system security, including TCP/IP, UDP, DNS, SSH, SSL/TLS, HTTP protocols, and common cyberattack techniques;
• Experience working with Windows and Linux/Unix operating systems;
• Practical Threat Hunting experience, including proactive identification of suspicious activities and potential security threats;
• Strong analytical and problem-solving skills, with a data-driven approach to security incident investigation.

Responsibilities:

• Manage and support daily SOC operations, including security incident analysis, triage, investigation, and response;
• Monitor security alerts, conduct proactive Threat Hunting, and determine appropriate incident response, mitigation, and recovery actions;
• Detect, analyze, and mitigate DoS/DDoS attacks across network, transport, and application layers (L3/L4/L7);
• Configure, maintain, and optimize SIEM, EDR, DLP, and DDoS protection solutions, including detection rules, alerting policies, and rate-limiting configurations;
• Continuously improve detection accuracy by reducing False Positives and optimizing security monitoring processes;
• Monitor cloud environments, including AWS, Azure, and Google Workspace, to identify, investigate, and respond to security threats;
• Develop and implement automation scripts and workflows to streamline SOC operations, incident response, and routine security tasks;
• Investigate security incidents, document findings, prepare reports, and provide recommendations to prevent recurring threats;
• Conduct security assessments of newly introduced systems, applications, and cloud/on-premises infrastructure to ensure compliance with security standards and internal policies;
• Collaborate with IT, Infrastructure, and Security teams to improve threat detection, strengthen security controls, and enhance the organization's overall security posture.

Additional Information

Our Benefit Cafeteria is Packed with Goodies:

• Children Allowance

• Mental Health Support

• Sport Activities

• Language Courses

• Automotive Services

• Veterinary Services

• Home Office Setup Assistance

• Dental Services

• Books and Stationery

• Training Compensation

• And yes, even Massage!

Ready to Take the Leap?

Join a team where every day is an opportunity to take a RISK and come out on top. Follow us on LinkedIn and Instagram, and let us be your hub for turning ambitious ideas and extraordinary solutions into reality.

At RISK, we believe that our people are the driving force behind our success. Together, we can achieve great things and push the boundaries of what's possible in the iGaming industry.