Senior Security Analyst
ARRISE is seeking a Senior Security Analyst to join its technical team. This role focuses on leading incident response efforts, managing security monitoring systems, and overseeing vulnerability management processes to ensure the integrity of the organisation's infrastructure.
The successful candidate will be responsible for performing in-depth log analysis, mentoring junior staff, and staying ahead of the evolving threat landscape. ARRISE requires a professional who can work independently to mitigate risks and improve the overall security posture of the company.
- Lead the investigation and response to complex security incidents, ensuring proper containment, eradication, and recovery.
- Coordinate cross-team incident response efforts, document lessons learned, and refine response strategies.
- Perform root cause analysis to determine the origin of security incidents and prevent future occurrences.
- Monitor and analyse security alerts from SIEM, EDR, and other monitoring tools.
- Fine-tune alerting systems to minimise false positives and improve detection accuracy.
- Integrate new log sources and update monitoring tools as needed to maintain comprehensive visibility.
- Perform in-depth log analysis, correlating data from various sources (network, endpoints, cloud, etc.) to identify and investigate security incidents.
- Use automation and scripting to streamline log analysis processes.
- Provide mentorship to junior SOC analysts, guiding them on threat detection, analysis techniques, and incident response.
- Develop and deliver training sessions, workshops, and tabletop exercises to improve team skills and readiness.
- Facilitate, optimise, and produce reports on regular patching management process to ensure relevant patches are installed and vulnerabilities remediated according to compliance and internal requirements.
- Analyse and report/present the vulnerabilities to multiple stakeholders for remediation and prioritization.
- Assist in providing support and resolution for scanning and vulnerability remediation reporting issues.
- Maintain intelligence network to discover any reported exploits, zero-day vulnerabilities and its applicability to Organization.
- Monitor open source and commercial threat intelligence for IOCs, new vulnerabilities, software weaknesses, and other attacker TTPs.
- Ensure that system vulnerabilities (new and backlogged) across the enterprise are dealt with in an efficient and timely manner.
- Develop mitigation plans for TTPs, IoCs and Threat Advisories on vulnerabilities.
- Participating and creation of detailed Incident Reports and contribute to lessons learned in collaboration with the appropriate team.
- Implementation knowledge on SIEM technology (Sentinel/Elastic-Security/Splunk) (required).
- Vulnerability management tools (NESSUS/Qualys), EDR and SOAR etc. (required).
- Confidence with working in Linux environments (required).
- Knowledge of AWS, Azure AD and Microsoft 365[E3&E5] (required).
- Strong understanding of threat landscape in terms of the tools, tactics, and techniques of threats employing both commodity and custom malware (required).
- Knowledge of AWS, Azure and GCP (required).
- Experience in Vulnerability Management and Remediation (required).
- Experience with tools such as Rapid7, Nessus, Metasploit, Qualys etc (required).
- Must have the ability to work independently with minimal supervision and make sound decisions in high pressure environments (required).
- Aptitude for learning and applying new skills (required).
- Knowledge of threat centric framework Cyber Kill chain and NIST Cyber Security Framework (required).
Pragmatic Play is a leading content provider to the iGaming industry, delivering a multi-product portfolio of online slots, live casino, bingo and virtual sports to operators worldwide. Founded in 2015 and headquartered in Gibraltar, it releases new titles at a high cadence and is certified across numerous regulated markets. It operates as part of the ARRISE group, which runs the live-casino studios and operational hubs across Europe, the Middle East and Latin America that power its games.