Senior Cyber Security Analyst

PENN Interactive; Oregon; Hybrid; USD 155.000 - 185.000; Vollzeit

Benefits dieser Stelle

Competitive compensation

Comprehensive Benefits

Education and conference reimburse m-

Zusammenfassung

PENN Entertainment, Inc. is seeking a security operations professional to lead incident response and develop automated workflows. You will monitor, analyze, and respond to security events, while improving detection coverage across SIEM, EDR, and SOAR platforms.

Collaboration with cross-functional teams and staying ahead of AI-driven threats are essential to success. The role emphasizes threat hunting, playbook refinement, and ensuring secure integration of new systems within a regulated

Qualifikationen

• 5+ years of experience in security operations, incident response, or a related field.
• Hands-on experience with SIEM and EDR platforms, including detection engineering and tuning.
• Working knowledge of scripting or automation (Python, PowerShell, or similar) and SOAR/orchestration tools.
• Experience with cloud security monitoring (AWS, Azure, or GCP).
• Familiarity with MITRE ATT&CK and NIST frameworks.
• Strong written and verbal communication for incident briefing.

Aufgaben

• Serve as the primary technical contact for escalated security events and coordinate incident response from triage to post-incident review.
• Develop and maintain automation for security workflows to reduce manual tasks.
• Monitor, investigate, and triage security alerts and events using AI-assisted tools.
• Create and optimize detection, correlation, and response content in SIEM/EDR and other platforms.
• Conduct proactive threat hunting and validation to improve coverage.
• Refine incident response playbooks and procedures for efficient handling of incidents.
• Maintain up-to-date knowledge of threats including AI-driven techniques.
• Conduct vulnerability assessments and prioritize remediation across infrastructure, apps, and cloud services.
• Evaluate security technologies to improve analyst efficiency and automate routine operations.

Kenntnisse

Security operations

Incident response

Scripting/Automation

Cloud security monitoring

MITRE ATT&CK / NIST knowledge

Communication skills

Ausbildung

Security certifications (GCIH/GCIA/GCFA/Security+)

Tools

SIEM platforms

EDR platforms

SOAR/orchestration

Python/PowerShell scripting

Cloud monitoring (AWS/Azure/GCP)

Jobbeschreibung

PENN Entertainment, Inc. is North America's leading provider of integrated entertainment, sports content, and casino gaming experiences. From casinos and racetracks to online gaming, sports betting and entertainment content, we deliver the experiences people want, how and where they want them. We're always on the lookout for those who are passionate about creating and delivering cutting-edge online gaming and sports media products. Whether it's through Hollywood Casino, theScore Bet Sportsbook, or theScore media app, we're excited to push the boundaries of what's possible. These state-of-the-art platforms are powered by proprietary in-house technology, a key component of PENN's omnichannel gaming and entertainment strategy.

When you join PENN Entertainment's digital team, you'll not only work on these cutting-edge platforms through theScore and PENN Interactive, but you'll also be part of a company that truly cares about your career growth. We're committed to supporting you as you expand your skills and explore new opportunities. With locations throughout North America, you can build a future at PENN Entertainment wherever you are. If you want to challenge conventions in gaming, media and entertainment, we want to talk to you.

About the Team & Role

As part of the team, you will be working with cross‑functional teams of friendly and dedicated Engineers, Product Managers and Designers determined to deliver some of the best apps the market has to offer. You will be responsible for monitoring and responding to security events within our environment in addition to participating in security uplift initiatives by developing internal tools and processes to automate security workflow, perform integration work, and threat analysis.

About Work

• Serve as the primary technical contact for escalated security events, leading and coordinating incident response from triage through containment, remediation, and post‑incident review.
• Develop and maintain automation for security workflows using scripting and orchestration to reduce manual Level 1 tasks.
• Monitor, investigate, and triage security alerts, abuse reports, and security events, using AI‑assisted tools to accelerate enrichment, analysis, and prioritization.
• Create, tune, and optimize detection, correlation, and response content in SIEM, EDR, and other security platforms to improve threat detection and reduce alert fatigue.
• Conduct proactive threat hunting and detection validation, and continuously improve monitoring coverage.
• Develop and refine incident response processes, playbooks, and procedures for efficient handling of security incidents.
• Maintain expertise in current and emerging threats, including AI‑driven attack techniques and abuse of generative AI platforms.
• Conduct vulnerability assessments, prioritize remediation, and validate corrective actions across infrastructure, applications, cloud services, and AI‑enabled solutions.
• Evaluate and optimize security technologies, including AI‑powered tools, that improve analyst efficiency and automate routine operations, and support the secure integration of new and existing systems into the security program.
• Support compliance and audit activities by gathering evidence, documenting controls, and assisting with remediation, including responsible and secure adoption of AI technologies.
• Collaborate effectively with peers and other departments to enhance security practices, uphold a culture of exceptional customer service, and promote continuous professional development through mentorship, industry best practices, and emerging AI security capabilities.
• Other duties as required.

About You

• 5+ years of experience in security operations, incident response, or a related field.
• Hands‑on experience with SIEM and EDR platforms, including detection engineering and tuning.
• Working knowledge of scripting or automation (Python, PowerShell, or similar) and SOAR or orchestration tools.
• Experience with cloud security monitoring (AWS, Azure, or GCP).
• Familiarity with frameworks such as MITRE ATT&CK and NIST.
• Strong written and verbal communication, including the ability to brief technical and non‑technical stakeholders during incidents.
• Preferred: GCIH, GCIA, GCFA, Security+, CySA+, or equivalent certification; experience in a regulated industry such as gaming, finance, or healthcare.

What We Offer

• Competitive compensation package.
• Comprehensive Benefits package.
• Fun, relaxed work environment.
• Education and conference reimbursements.

Salary Range$155,000—$185,000 USD

PENN Interactive is proud to be an equal opportunity workplace. We will consider all qualified applicants for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability, veteran status, genetic information, or any other basis protected by applicable law. Base pay is one part of the Total Rewards that Penn Interactive provides to compensate and recognize employees for their work. Most sales positions are eligible for a Commission under the terms of an applicable plan, while most non‑sales positions are eligible for a Bonus. Additionally, Penn Interactive provides best‑in‑class benefits to eligible employees. We believe that benefits should connect you to the support you need when it matters most, and should help you care for those who matter most. That's why we provide an array of options, expert guidance and always‑on tools, that are personalized to meet the needs of your reality - to help support you physically, financially and emotionally through the big milestones and in your everyday life.