SOC Analyst Tier 2: Incident Response & Threat Hunting

Aristocrat Gaming; Las Vegas (NV); On-site; USD 90,000 - 130,000; Full time

Job summary

Aristocrat Gaming is seeking a skilled Security Operations Analyst (Tier 2) to join the SOC. You will own high-severity alerts, investigate IOCs across endpoint, identity, network and cloud data, and drive containment per playbooks.

You will build queries for SIEM/EDR/SOAR, tune detections, and document cases with detailed analysis. Occasional on-call shifts and weekend coverage are required.

Qualifications

• 2+ years hands-on SOC experience.
• Bachelor’s degree in information systems, cybersecurity, or related field.
• Proficient in CrowdStrike Query Language (CQL) or SIEM query languages (KQL, SPL).
• Hands-on EDR (live response, process-tree analysis, host isolation).
• Familiarity with Windows, Linux, and Active Directory attack patterns.
• Understanding of the incident-response process and phishing/malware investigations (MITRE ATT&CK).
• Nice to have: Security+, ISC2 SSCP, Microsoft SC-200, Cloud certifications.
• Cloud security monitoring (AWS/Azure/GCP); scripting (Python/PowerShell); SOAR/automation.
• Exposure to detection tuning or threat hunting.

Responsibilities

• Own MSSP customer concerns and high-severity alerts from start to finish.
• Review MSSP triage for quality; provide tuning and escalation feedback.
• Triage phishing, malware, and credential-compromise investigations.
• Contain and remediate per playbooks: host isolation, credential resets, IOC blocking.
• Document actions with hypothesis, evidence, and disposition.
• Run queries across SIEM/EDR/SOAR to support investigations.
• Identify detection gaps; propose tuning and enrichment with evidence.
• Document cases for QA and handoff; mentor junior staff as needed.
• Support threat hunts and root-cause analysis.
• Contribute to playbooks, runbooks, and knowledge bases.
• Participate in 24x7 on-call and weekend coverage.

Skills

SOC operations

Incident response

Threat hunting

Windows/Linux/AD

CrowdStrike (CQL)

SIEM/EDR/SOAR

Communication

On-call rotation

Education

Bachelor's degree in information systems or cybersecurity

Tools

CrowdStrike

SIEM

EDR

SOAR

KQL

Job description

Aristocrat Gaming is seeking a skilled Security Operations Analyst (Tier 2) to join the SOC. You will own high-severity alerts, investigate IOCs across endpoint, identity, network and cloud data, and drive containment per playbooks.

You will build queries for SIEM/EDR/SOAR, tune detections, and document cases with detailed analysis. Occasional on-call shifts and weekend coverage are required.