Senior Cyber Security Analyst

Penn Interactive; United States; Remote; USD 155,000 - 185,000; Full time

Benefits offered by this job

Competitive compensation package

Education and conference reimburse– m

Fun relaxed work environment

Job summary

Penn Interactive is hiring for a security operations role focused on incident response and threat detection. You will monitor security events, develop automation for workflows, and lead incident response from triage to resolution.

The role requires hands-on experience with SIEM/EDR, scripting, and cloud security monitoring, with preferred certifications and experience in regulated industries. The team collaborates across engineering and product to strengthen security and leverage AI-driven

Qualifications

• 5+ years of experience in security operations, incident response, or related field.
• Hands-on experience with SIEM and EDR platforms, including detection engineering and tuning.
• Working knowledge of scripting or automation (Python, PowerShell, or similar) and SOAR/orchestration tools.
• Experience with cloud security monitoring (AWS, Azure, or GCP).
• Familiarity with MITRE ATT&CK and NIST frameworks.
• Strong written and verbal communication for incidents with technical and non-technical stakeholders.
• Preferred: relevant certifications (GCIH, GCIA, GCFA, Security+, CySA+) and experience in regulated industries such as gaming, finance, or healthcare.

Responsibilities

• Serve as the primary technical contact for escalated security events, coordinating incident response from triage to containment and post-incident review.
• Develop and maintain automation for security workflows to reduce manual tasks.
• Monitor, investigate, and triage security alerts, abuse reports, and security events using AI-assisted tools.
• Create, tune, and optimize detection/response content in SIEM, EDR, and other security platforms.
• Conduct proactive threat hunting and validate monitoring coverage.
• Develop incident response playbooks and procedures for efficient handling of security incidents.
• Maintain expertise on current and emerging threats including AI-driven techniques.
• Conduct vulnerability assessments and coordinate remediation across infrastructure, apps, cloud services, and AI-enabled solutions.
• Evaluate and optimize security technologies to improve analyst efficiency and automate routine operations.
• Support compliance and audit activities by gathering evidence and documenting controls.

Job description

PENN Entertainment, Inc. is North America’s leading provider of integrated entertainment, sports content, and casino gaming experiences. From casinos and racetracks to online gaming, sports betting and entertainment content, we deliver the experiences people want, how and where they want them.

We’re always on the lookout for those who are passionate about creating and delivering cutting-edge online gaming and sports media products. Whether it’s through Hollywood Casino , theScore Bet Sportsbook , or theScore media app, we’re excited to push the boundaries of what’s possible. These state-of-the-art platforms are powered by proprietary in-house technology, a key component of PENN’s omnichannel gaming and entertainment strategy.

When you join PENN Entertainment’s digital team, you’ll not only work on these cutting-edge platforms through theScore and PENN Interactive, but you’ll also be part of a company that truly cares about your career growth. We’re committed to supporting you as you expand your skills and explore new opportunities.

With locations throughout North America, you can build a future at PENN Entertainment wherever you are. If you want to challenge conventions in gaming, media and entertainment, we want to talk to you.

About the Team & Role

As part of the team, you will be working with cross-functional teams of friendly and dedicated Engineers, Product Managers and Designers determined to deliver some of the best apps the market has to offer. You will be responsible for monitoring and responding to security events within our environment in addition to participating in security uplift initiatives by developing internal tools and processes to automate security workflow, perform integration work, and threat analysis.

About Work

• Serve as the primary technical contact for escalated security events, leading and coordinating incident response from triage through containment, remediation, and post-incident review.
• Develop and maintain automation for security workflows using scripting and orchestration to reduce manual Level 1 tasks.
• Monitor, investigate, and triage security alerts, abuse reports, and security events, using AI-assisted tools to accelerate enrichment, analysis, and prioritization.
• Create, tune, and optimize detection, correlation, and response content in SIEM, EDR, and other security platforms to improve threat detection and reduce alert fatigue.
• Conduct proactive threat hunting and detection validation, and continuously improve monitoring coverage.
• Develop and refine incident response processes, playbooks, and procedures for efficient handling of security incidents.
• Maintain expertise in current and emerging threats, including AI-driven attack techniques and abuse of generative AI platforms.
• Conduct vulnerability assessments, prioritize remediation, and validate corrective actions across infrastructure, applications, cloud services, and AI-enabled solutions.
• Evaluate and optimize security technologies, including AI-powered tools, that improve analyst efficiency and automate routine operations, and support the secure integration of new and existing systems into the security program.
• Support compliance and audit activities by gathering evidence, documenting controls, and assisting with remediation, including responsible and secure adoption of AI technologies.
• Collaborate effectively with peers and other departments to enhance security practices, uphold a culture of exceptional customer service, and promote continuous professional development through mentorship, industry best practices, and emerging AI security capabilities.
• Other duties as required.

About You

• 5+ years of experience in security operations, incident response, or a related field.
• Hands-on experience with SIEM and EDR platforms, including detection engineering and tuning.
• Working knowledge of scripting or automation (Python, PowerShell, or similar) and SOAR or orchestration tools.
• Experience with cloud security monitoring (AWS, Azure, or GCP).
• Familiarity with frameworks such as MITRE ATT&CK and NIST.
• Strong written and verbal communication, including the ability to brief technical and non-technical stakeholders during incidents.
• Preferred: GCIH, GCIA, GCFA, Security+, CySA+, or equivalent certification; experience in a regulated industry such as gaming, finance, or healthcare.

What We Offer

• Competitive compensation package.
• Fun, relaxed work environment.
• Education and conference reimbursements.

Salary Range

$155,000 - $185,000 USD

Penn Interactive is proud to be an equal opportunity workplace. We will consider all qualified applicants for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability, veteran status, genetic information, or any other basis protected by applicable law.Base pay is one part of the Total Rewards that Penn Interactive provides to compensate and recognize employees for their work. Most sales positions are eligible for a Commission under the terms of an applicable plan, while most non-sales positions are eligible for a Bonus. Additionally, Penn Interactive provides best-in-class benefits to eligible employees. We believe that benefits should connect you to the support you need when it matters most, and should help you care for those who matter most. That’s why we provide an array of options, expert guidance and always-on tools, that are personalized to meet the needs of your reality – to help support you physically, financially and emotionally through the big milestones and in your everyday life.

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey.Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.

As set forth in Penn Interactive’s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection.As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.