Senior Security Analyst
As a Senior Security Analyst, you will lead investigations that protect customers and the systems behind DraftKings, working across corporate and production environments. The role serves as the senior escalation point, operating across endpoint, identity systems, cloud environments, and production workloads.
The Senior Security Analyst will own complex investigations, navigate incidents without an established playbook, and strengthen team response capabilities while mentoring other analysts.
- Lead security investigations across endpoint, identity systems, cloud environments, and production workloads, covering triage, root-cause analysis, containment, and eradication.
- Act as incident commander in your region, coordinating parallel work across IT, Engineering, Legal, HR, and other teams.
- Investigate cases with no existing playbook: decide what data to collect, build the tools to analyze it, and document it for reuse.
- Write and peer-review case summaries, incident reports, and timelines.
- Hunt for novel threats, such as AI-assisted intrusions or supply-chain compromise.
- Convert findings into telemetry, detections, and automation that raise alert quality and reduce manual work.
- Drive post-incident hardening with Security Engineering and mentor analysts through case review, escalation support, and knowledge sharing.
- At least 6 years in cybersecurity, including 4 or more years in incident response, forensics, threat intelligence, or threat hunting (required).
- Experience running major incidents with little supervision, under time pressure and incomplete facts, including briefing leadership and writing the post-incident reports for both engineers and executives (required).
- Deep knowledge of how attackers operate today, including insider threat, and the frameworks such as MITRE ATT&CK, the Diamond Model, the kill chain, with the ability to assess an attacker’s capabilities as an investigation unfolds (required).
- Hands-on experience with SIEM, EDR/NDR, and CSPM tooling (required).
- Monitoring experience in endpoint, identity, SaaS or CI/CD environments, including incident investigation in at least one major cloud environment, such as AWS, Azure, or GCP (required).
- Practical scripting skills in Python, PowerShell or a similar language, with experience utilizing YARA-L, Sigma, KQL, SPL or similar for investigation queries and detections (required).
- Comprehensive health benefits, including various medical plans, dental, and vision.
- Wellbeing programme including free therapy sessions with Lyra Mental Health Solution, Lyra Employee Assistance Program, the Calm App, Virtual Yoga Classes, and many more.
- 14 weeks of 100% paid parental leave to all global team members and offer workplace lactation support.
- Family planning support for adoption, surrogacy, fertility treatments, or other family planning.
- 25 vacation days per year.
- 200 BGN food vouchers per month.
- 50% of your monthly sports card covered in a wide network of sports facilities.
- Financial planning programmes through Origin Financial.
- Commuter benefits.
DraftKings Inc. is a leading American digital sports entertainment and gaming company, headquartered in Boston, Massachusetts. Founded in 2012, it started in daily fantasy sports and has grown into one of the largest US online sportsbook and iGaming operators. The company offers mobile sports betting, online casino and daily fantasy contests across regulated North American markets. DraftKings is listed on the Nasdaq stock exchange and employs several thousand people.
