Senior Cyber Defense Operations Analyst

VulnU; Cary (NC); In loco; USD 120.000 - 180.000; Tempo pieno

Vantaggi offerti da questo lavoro

Unlimited PTO

Retirement match

Health premiums covered

Descrizione del lavoro

Epic Games in Cary, NC seeks a Senior Cyber Defense Operations Analyst to lead investigations and incident response across cloud, on-premises, and production environments. You will drive detection improvements, automate repetitive tasks, and coordinate with engineering, legal, and privacy teams to mitigate threats.

You will develop playbooks, mentor analysts, and ensure rigorous incident documentation while leveraging AI-assisted workflows to scale SOC operations.

Competenze

• 5+ years of experience in security operations, incident response, or threat detection, including leading investigations end-to-end.
• Hands-on experience with SIEM and EDR platforms (e.g., Splunk, Google SecOps, CrowdStrike NGSIEM) and writing effective queries and detections.
• Strong understanding of attacker tradecraft and frameworks such as MITRE ATT&CK.
• Experience investigating in cloud environments (AWS and/or GCP), SaaS, and identity platforms.
• Scripting or programming skills (Python or similar) and a drive to automate repetitive work; SOAR experience is a plus.

Mansioni

• Lead the triage, investigation, and response for security alerts and incidents across cloud, corporate, endpoint, identity, and production environments.
• Act as an escalation point and incident lead, coordinating with engineering, legal, privacy, and business partners through containment, remediation, and post-incident review.
• Drive the detection lifecycle management, developing, tuning, and retiring detection logic to maximize signal-to-noise ratio and close emerging threat gaps.
• Identify recurring analyst work and partner with security engineering to automate it, including AI-agent workflows with clear validation and human review where it counts.
• Turn threat intelligence and emerging vulnerabilities into rapid exposure assessments and actionable response across the company.
• Develop and maintain playbooks, runbooks, and operational metrics that make the SOC faster, more consistent, and easier to scale.
• Set and elevate standards for investigation quality and case documentation, actively coaching analysts and holding managed-service partners accountable to rigorous SLAs and analytical depth.

Conoscenze

SOC operations

Incident response

SIEM/EDR

Cloud security

Python scripting

MITRE ATT&CK

SOAR

Strumenti

Splunk

Google SecOps

CrowdStrike NGSIEM

Descrizione del lavoro

# Senior Cyber Defense Operations AnalystEpic Games · epicgames.devCategory: Detection & ResponseLocation: Cary,North Carolina,United States · Vancouver,British Columbia,Canada · Montreal,Quebec,CanadaLevel: Senior## Quality of lifeWhat the posting states. Hover or tap a perk to see the line it came from.* Unlimited PTO* Retirement match* 100% health premiums coveredWHAT MAKES US EPIC?At the core of Epic’s success are talented, passionate people. Epic prides itself on creating a collaborative, welcoming, and creative environment. Whether it’s building award-winning games or crafting engine technology that enables others to make visually stunning interactive experiences, we’re always innovating.Being Epic means being a part of a team that continually strives to do right by our community and users. We’re constantly innovating to raise the bar of engine and game development.INFOSECWhat We DoKeep Epic’s networks, hardware, and people safe from security risks. Install security measures and operate software to protect systems and information infrastructure, including firewalls and encryption programs. Document issues as they arise and assess report any impact caused.What You'll DoEpic's Security Operations Center protects one of the world's largest player communities, along with the people, infrastructure, and technology that support it. As a Senior CDO Analyst, you will lead investigations and incident response while helping reinvent how the SOC operates, turning repeatable analysis into automated, Al-assisted workflows so the team can focus on the threats that matter most.In this role, you willLead the triage, investigation, and response for security alerts and incidents across cloud, corporate, endpoint, identity, and production environmentsAct as an escalation point and incident lead, coordinating with engineering, legal, privacy, and business partners through containment, remediation, and post-incident reviewDrive the detection lifecycle management, developing, tuning, and retiring detection logic to maximize signal-to-noise ratio, minimize alert fatigue, and close emerging threat gapsIdentify recurring analyst work and partner with security engineering to automate it, including Al-agent workflows with clear validation and human review where it countsTurn threat intelligence and emerging vulnerabilities into rapid exposure assessments and actionable response across the companyDevelop and maintain playbooks, runbooks, and operational metrics that make the SOC faster, more consistent, and easier to scaleSet and elevate standards for investigation quality and case documentation, actively coaching analysts and holding managed-service partners accountable to rigorous SLAs and analytical depthWhat we're looking for5+ years of experience in security operations, incident response, or threat detection, including leading investigations end-to-endDeep hands-on experience with SIEM and EDR platforms (e.g., Splunk, Google SecOps, CrowdStrike NGSIEM, etc.) and writing effective queries and detectionsStrong understanding of attacker tradecraft and frameworks such as MITRE ATT CK, with the ability to reconstruct activity from logs and telemetryExperience investigating in cloud environments (AWS and/or GCP), SaaS, and identity platformsScripting or programming skills (Python or similar) and a drive to automate repetitive work; SOAR experience is a plusCuriosity about Al and emerging technology, and interest in applying them to security operations responsiblyCalm, decisive judgment under pressure, with the ability to prioritize competing incidents and communicate clearly to technical and executive audiencesStrong written communication, with a high standard for incident documentation and reportingA self-directed, ownership-driven approach and a willingness to challenge how things have always been doneEPIC JOB + EPIC BENEFITS = EPIC LIFEOur intent is to cover all things that are medically necessary and improve the quality of life. We pay 100% of the premiums for both you and your dependents. Our coverage includes Medical, Dental, a Vision HRA, Long Term Disability, Life Insurance a 401k with competitive match. We also offer a robust mental well-being program through Modern Health, which provides free therapy and coaching for employees dependents. Throughout the year we celebrate our employees with events and company-wide paid breaks. We offer unlimited PTO and sick time and recognize individuals for 7 years of employment with a paid sabbatical.ABOUT USEpic Games is a leading interactive entertainment company. For over 30 years we've been making award-winning games and engine technology that empowers others to make visually stunning games and 3D content that bring environments to life like never before. Epic's award-winning Unreal Engine technology not only provides game developers the ability to build high-fidelity, interactive experiences for PC, console, mobile, and VR, it is also a tool being embraced by content creators across a variety of industries such as media and entertainment, automotive, and architectural design. As we continue to build our Engine technology and develop remarkable games, we strive to build teams of world-class talent.Like what you hear? Come be a part of something Epic!Epic Games deeply values diverse teams and an inclusive work culture, and we are proud to be an Equal Opportunity employer. Learn more about our Equal Employment Opportunity (EEO) Policy here.Note to Recruitment Agencies: Epic does not accept any unsolicited resumes or approaches from any unauthorized third party (including recruitment or placement agencies) (i.e., a third party with whom we do not have a negotiated and validly executed agreement). We will not pay any fees to any unauthorized third party. Further details on these matters can be found here.