SOC Analyst I Job at Flutter International in San Francisco

Flutter International

Flutter International is the home of some of the world’s most innovative entertainment brands. Here you can find a world of opportunities to take your career to the next level.

SOC Analyst Cyber Security Associate Engineer 1

We are seeking a proactive and enthusiastic SOC L1 Analyst to join our Security Operations team. In this role, you will be the first line of defense against cyber threats, monitoring security alerts, triaging incidents, and escalating issues to higher levels when needed. With 1-3 years of experience in SOC environments, you’ll apply foundational cybersecurity knowledge to help protect the organization’s data and systems from potential threats. This position offers growth opportunities for those passionate about cybersecurity and keen on advancing their skills.

Key Responsibilities:

1. Cloud Security Monitoring:
   • Monitor and secure our cloud infrastructure, with a primary focus on AWS.
   • Identify and investigate misconfigurations, vulnerabilities, unauthorized activities and more, within the cloud environment.
   • Leverage cloud-native security tools and services (like AWS GuardDuty, SecurityHub, etc.) for monitoring and investigation.
2. Security Monitoring & Event Triage:
   • Monitor security tools (SIEM, EDR, WAF, Proxy, DLP, etc.) for real-time alerts and anomalies.
   • Perform initial triage of security events, assess risk, and escalate incidents to L2 analysts as needed.
   • Investigate common security incidents such as phishing attempts, malware alerts, unauthorized access, etc.
3. Incident Response Support:
   • Assist in executing incident investigation and response playbooks.
   • Collect and investigate essential information for incident analysts to facilitate deeper investigations, including log correlation and basic threat analysis.
   • Document incidents and maintain accurate records of events in ticketing systems.
4. Threat Intelligence & Reporting:
   • Gather and analyze security event data, applying threat intelligence to help contextualize potential threats.
   • Generate daily, weekly, and monthly security reports highlighting notable incidents and general SOC activity.
5. Vulnerability Management:
   • Monitor the environment for vulnerabilities and misconfigurations.
   • Assist in basic vulnerability assessment activities, reporting findings to senior analysts for remediation.
6. Collaboration & Knowledge Development:
   • Work closely with senior analysts, network/IT engineers, and other teams (DevOps, SDE, etc.) to support security initiatives.
   • Stay updated on the latest security trends and tactics employed by cyber adversaries.
   • Participate in team meetings and knowledge-sharing sessions to improve the team’s overall capabilities.

Requirements:

1. Experience: 1-3 years of experience in a Security Operations Center (SOC).
2. Security Monitoring: Hands-on experience to investigate alerts from security tools like AWS GuardDuty, AWS CloudTrail events, SIEM, CrowdStrike EDR, Cloudflare WAF, Zscaler ZIA/ZPA, DLP, etc.
3. Incident Triage: Ability to investigate and triage security alerts, identifying the potential severity and urgency.
4. Basic Cybersecurity Knowledge: Understanding of fundamental security concepts, common attack vectors and security controls.
5. Network & System Fundamentals: Basic knowledge of network protocols, Windows/Linux systems and endpoint security.
6. Incident Documentation: Strong documentation skills for tracking and reporting incidents.
7. Security Certifications (Preferred): Security+, CEH, or other relevant certifications are a plus but not mandatory.

Additional Skills & Attributes:

1. Analytical Thinking: Ability to assess data and alerts methodically to identify potential threats.
2. Strong Communication: Clear and concise communication skills to relay technical issues to both technical and non-technical stakeholders.
3. Attention to Detail: Vigilance in monitoring security events, ensuring no alert is overlooked.
4. Team Collaboration: Willingness to work in a collaborative environment, supporting team members and contributing to shared goals.
5. Continuous Learning: Eagerness to expand cybersecurity knowledge and stay updated on the evolving threat landscape.

About Junglee Games

Junglee Games is a leader in the skill-gaming space, with close to 96 million users. Founded in San Francisco in 2012, and part of the $30 Bn Flutter Entertainment Group, Junglee Games is the fastest-growing skill-gaming company in the world. Some of our notable games are Junglee Rummy, Howzat, Carrom Stars and Solitaire Gold.

Our mission is to build entertainment for millions of people around the world and connect people through high-quality games.

Since we were founded, we've drawn 700 of the world’s most talented people into our ranks. Our team has worked on international AAA titles like Transformers, Star Wars: The Old Republic, Real Steel, Rio, Mech Conquest, and Dueling Blades. Our designers have worked on some of Hollywood’s biggest hits including the movie Avatar.

Junglee is not just a gaming business - it is a blend of data science, innovation, cutting-edge technology and, most importantly, a values-driven culture that is creating the next set of conscious leaders. Junglee Games is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.