Security Operations Engineer
As a valued member of the Security Operations Center (SOC) team, the Security Engineer will be responsible for early and accurate detection, response and containment of threats directed against the environment. This role requires advanced skills in intrusion detection and threat hunting to identify credible risks/adversaries to proprietary and sensitive data before a potential breach.
Collaboration with other security engineers, developers, vendors and business units to constantly improve the overall security posture will be the key to success at FanDuel Group. The company is looking for a team player with highly technical analytical skills.
- Monitor and analyse network, server, endpoint, database, and application activities for indicators of compromise, minimising false positives.
- Automate alert collection, prioritisation, tasks and processes, periodic audits, and controls.
- Lead incident response efforts, conducting thorough remediation and root cause analysis.
- Enhance security posture for large-scale customer-facing hybrid cloud environment and internal workplace, leveraging MITRE ATT&CK tactics and techniques assessment.
- Drive growth and maturity of threat hunting program to proactively identify and mitigate security threats.
- Contribute to security process enhancement and documentation, staying abreast of cybersecurity developments to brief SOC director effectively.
- Evaluate and conduct proof-of-concepts for innovative technologies, collaborating with security engineers on implementation.
- Foster cross-departmental integration to establish strong business relationships, mentor business units in cybersecurity guidelines and best practices while promoting knowledge sharing and maintaining high customer service levels.
- Empathetic contributor who has experience operating effectively across teams and disciplines in highly ambiguous and rapidly changing environments and have successfully executed on ambitious projects (required)
- Proficient experience working in cybersecurity operations and incident response, to include utilising Security Information and Event Management (SIEM) platforms, Intrusion Detection/Prevention Systems (IDS/IPS), and Vulnerability Management and Threat Intelligence applications (required)
- Experience working with large, complex networks and systems (required)
- Bachelor of Science degree in Information Security, Engineering, Computer Science or related field (preferred)
- Proficient understanding and applicability of MITRE ATT&CK framework (or other industry related frameworks) (required)
- Programming/scripting experience (bash, python, PowerShell) (required)
- Knowledge of log ingestion pipelines, log parsing, grok patterns and regular expressions (required)
- Capable of writing detections using YAML and JSON styled languages (required)
- Ability to write and automate security incident playbooks (required)
- Excellent communication skills both verbal and written to help articulate and lead Incident response processes; ability to write about technical subjects to a wide audience for reporting on security incidents in regulated industries (required)
- At least one of the following certifications with combined experience: CISSP, CEH, GCIH, GCFA, Security+, OSCP (required)
- Security experience with cloud native company expanding across multiple environments from, *nix/Windows operating systems, cloud resources (e.g. AWS, GCP, O365), and customer-facing web applications (required)
- Deep knowledge of attacker methodologies and techniques and corresponding incident response methodologies to detect and protect (required)
- Health plans including programs for fertility and family planning, mental health support, and fitness benefits.
- Generous paid time off (PTO & sick leave).
- Annual bonus and long-term incentive opportunities.
- 401k with up to a 5% match.
- Commuter benefits.
- Pet insurance.
- Medical, vision, and dental insurance.
- Life insurance and disability insurance.
- 14 paid company holidays.
FanDuel Group is an innovative sports-tech entertainment company that is changing the way consumers engage with their favorite sports, teams, and leagues. The premier gaming destination in the North America, FanDuel Group consists of a portfolio of leading brands across gaming, sports betting, daily fantasy sports, advance-deposit wagering, and TV/media, including FanDuel, Stardust Casino and TVG. The company is based in New York with US offices in Los Angeles, Atlanta, and Jersey City, as well as global offices in Canada and Scotland. The company’s affiliates have offices worldwide, including in Ireland, Portugal, Romania, and Australia. FanDuel Group is a subsidiary of Flutter Entertainment, the world's largest sports betting and gaming operator with a portfolio of globally recognized brands and traded on the New York Stock Exchange (NYSE: FLUT).