Senior Cyber Security Analyst
Penn Interactive is seeking a Senior Cyber Security Analyst to join its digital team. The role involves working with cross-functional teams of engineers, product managers, and designers to support the security of cutting-edge gaming and sports media platforms.
The successful candidate will be responsible for monitoring and responding to security events within the environment. Additionally, the analyst will participate in security uplift initiatives by developing internal tools and processes to automate security workflows, perform integration work, and conduct threat analysis.
- Serve as the primary technical contact for escalated security events, leading and coordinating incident response from triage through containment, remediation, and post-incident review.
- Develop and maintain automation for security workflows using scripting and orchestration to reduce manual Level 1 tasks.
- Monitor, investigate, and triage security alerts, abuse reports, and security events, using AI-assisted tools to accelerate enrichment, analysis, and prioritisation.
- Create, tune, and optimise detection, correlation, and response content in SIEM, EDR, and other security platforms to improve threat detection and reduce alert fatigue.
- Conduct proactive threat hunting and detection validation, and continuously improve monitoring coverage.
- Develop and refine incident response processes, playbooks, and procedures for efficient handling of security incidents.
- Maintain expertise in current and emerging threats, including AI-driven attack techniques and abuse of generative AI platforms.
- Conduct vulnerability assessments, prioritise remediation, and validate corrective actions across infrastructure, applications, cloud services, and AI-enabled solutions.
- Evaluate and optimise security technologies, including AI-powered tools, that improve analyst efficiency and automate routine operations, and support the secure integration of new and existing systems into the security program.
- Support compliance and audit activities by gathering evidence, documenting controls, and assisting with remediation, including responsible and secure adoption of AI technologies.
- Collaborate effectively with peers and other departments to enhance security practices, uphold a culture of exceptional customer service, and promote continuous professional development through mentorship, industry best practices, and emerging AI security capabilities.
- Other duties as required.
- 5+ years of experience in security operations, incident response, or a related field (required).
- Hands-on experience with SIEM and EDR platforms, including detection engineering and tuning (required).
- Working knowledge of scripting or automation (Python, PowerShell, or similar) and SOAR or orchestration tools (required).
- Experience with cloud security monitoring (AWS, Azure, or GCP) (required).
- Familiarity with frameworks such as MITRE ATT&CK and NIST (required).
- Strong written and verbal communication, including the ability to brief technical and non-technical stakeholders during incidents (required).
- GCIH, GCIA, GCFA, Security+, CySA+, or equivalent certification (preferred).
- Experience in a regulated industry such as gaming, finance, or healthcare (preferred).
- Competitive compensation package.
- Comprehensive Benefits package.
- Fun, relaxed work environment.
- Education and conference reimbursements.
Penn Interactive is the online gaming arm of PENN Entertainment, one of the largest regional casino operators in the United States. Headquartered in Philadelphia, it runs PENN's digital sports betting and online casino products, including theScore Bet and the Hollywood Casino online brands. The business previously operated the ESPN Bet sportsbook under a partnership with ESPN, which ended in late 2025. Penn Interactive combines proprietary technology - including theScore media platform - with PENN's nationwide casino network across North America.