Security Operations Analyst
This role identifies and handles security incidents, working closely with teams across the group to ensure that relevant security attacks are detected, investigated, and mitigated in a timely manner.
It reviews the security risks that the organisation faces, implementing appropriate responses to ensure its security posture remains aligned with the needs of the dynamic organisation.
- Monitor security events and identify potential incidents across the organisation environments (Corporate, Development).
- Review alerts, assess risks and prioritise incident investigation efforts.
- Develop security tools and integrations to automate security operation processes.
- Work with technical and departments to identify the source of the incidents and the appropriate resolution.
- Identify "lessons learned" together with other organisational teams.
- Investigate security incidents.
- Decide and implement mitigation measures effectively after producing accurate and timely reports on Information Security incidents.
- Assist technical teams in gathering incident evidence and remediating issues.
- Operate and Tune security consoles configuration.
- Conduct forensic analysis during the investigation of incidents.
- Support the fraud investigation teams on their incident investigations.
- Respond to critical incidents on a 24x7 basis.
- At least two years' experience in a similar Information Security position (required).
- Experience developing security tools and open-source projects (required).
- Great problem-solving skills (required).
- Outstanding knowledge of the technical foundations behind networking, operating applications, TCP/IP, Linux, Windows, Web technologies, and other networking protocols (required).
- Experience with Information Security processes and theory (required).
- Vulnerability research and exploitation skills (required).
- Customer-facing experience (required).
- Experience in vulnerability management (required).
- Experience in risk management (required).
- Experience in traffic and packet analysis (required).
- Security Certification (GIAC, OSCP, etc.) or similar qualification (required).
- Experience configuring and maintaining SIEM tools (required).
- Experience in creation of log correlation and incident detection rules (required).
- Experience managing security consoles and log correlation solutions (required).
- Online Gaming security experience (required).
- Experience in forensic analysis (required).
- Experience in security assessments (required).
- Experience securing Microsoft protocols (required).
- Regulatory and industry standards work: ISO27001, PCI-DSS, etc (required).
- Other relevant professional qualifications, e.g. CISA, CISM, CISSP, GIAC, etc (nice-to-have).
- A regular bonus.
- Healthcare support.
- A stake in our success through our ShareSave scheme.
- Great development opportunities.
- Wellbeing support.
Entain is one of the world's largest sports betting and gaming entertainment groups and a FTSE 100 company. Formed when GVC Holdings rebranded as Entain in December 2020, its brands trace their history back to the 1880s and include bwin, Coral, Foxy, Gala, Ladbrokes and partypoker. Through its joint venture with MGM Resorts International, it powers BetMGM in the United States with its proprietary technology. Headquartered in London, Entain employs over 30,000 people with offices across 19 countries.