Security Operations Analyst (Tier 2)

Job description

At Aristocrat, we are passionate about delivering world-class gaming experiences that bring happiness to millions of players worldwide. We are seeking an exceptionally skilled Security Operations Analyst (Tier 2) to join our team. As part of our Security Operations Center, you will play a crucial role in protecting our digital assets and maintaining our flawless security standards. This position offers an outstanding opportunity to collaborate with global teams, grow within a structured mentoring program, and build your career in a modern SOC environment. If you are ambitious and ready to compete at the highest level, this role is for you! What You'll Do Own MSSP customer concerns and medium/high-severity alerts from start to finish. Scope the activity and build the timeline. Identify indicators of compromise (IOCs) and investigate endpoint, identity, network, and cloud data to reach a defensible conclusion. Review a sample of MSSP triage for quality, offering tuning, detection-gap, and escalation-criteria feedback to the MSSP. Triage phishing (header analysis, sandboxing), malware (static & sandbox), and credential-compromise investigations. Complete containment and remediation within approved playbooks host isolation, account disablement, credential reset, IOC blocking and record every action taken. Raise issues to senior specialists with a full set of information: hypothesis, evidence, actions taken, current risk, and specific ask; send well-understood benign patterns back to the MSSP along with a detailed disposition and the missing playbook step. Build and run queries across our SIEM, EDR, and SOAR platforms and MSSP tooling to support investigations and reporting. Identify detection and tuning gaps. Flag false positives and propose tuning, suppression, or enrichment with supporting evidence. Test and validate detection changes shipped by the detection engineering team. Document every case to a high standard. Ensure it is complete, accurate, and reproducible by someone not on shift. Accept peer and lead QA review. Act on feedback within the same cycle. Support specialist-led threat hunts and incident response evidence gathering and technical analysis from detection through root cause analysis (RCA). Contribute to playbook, runbook, and knowledge-base improvements drawn from your own casework. Participate in the 24x7 rotating shift roster, including on-…