Sr Engineer II - SecOps Insider threat

At Aristocrat, we are at the forefront of entertainment and technology, pushing boundaries to build world-leading gaming content. Our mission is to bring happiness to life through the power of play, and our culture is built on innovation, creativity, and integrity. As a Sr Security Analyst, you will play a crucial role in our Security Operations Center (SOC), ensuring the safety and integrity of our systems. This is an outstanding opportunity to join a dynamic team, collaborate globally, and drive impactful security initiatives. Your expertise will be instrumental in protecting our assets and supporting our mission to deliver world-class gaming experiences. Join us and be part of an ambitious team that values connection and strives for excellence!

What You'll Do

• Serve as the incident lead for handling and investigating high-severity and complex security incidents from beginning to end. Focus on defining the incident scope, containment, eradication, and recovery phases. Work closely with technical and business partners. Assume responsibility for the root-cause analysis.
• Lead complex, multi-stage investigations across endpoint, identity, network, cloud, and SaaS telemetry, including advanced malware analysis, credential-compromise, and lateral-movement investigations.
• Define detection strategy aligned to MITRE ATT&CK and the organization’s threat model; identify and recommend new detection logic across SIEM, XDR, EDR, and SOAR.
• Conduct threat hunts guided by threat intelligence, emerging TTPs, and gaps in detection coverage; convert findings into new detections, playbooks, and control recommendations.
• Lead Tier 2 SOC operations, ensuring shift priorities, case load, and blocking issue flow meet SLAs and quality standards.
• Build and maintain SOC playbook, runbook, and knowledge-based library; ensure content stays current with tooling and threat changes.
• Identify, build, and recommend process improvements across the SOC, measuring and reporting their impact.
• Chip in to and help implement the multi-year security operations strategy, including detection coverage roadmap, telemetry strategy, automation targets, and capability maturity.
• Interpret security findings as risk-centered advice for security engineering, IT, and business collaborators.
• Mentor and develop Tier 1 and Tier 2 analysts through structured mentoring, investigation walkthroughs, and technical training.
• Participate in cross-functional forums and collaborate with global security teams to ensure a cohesive, consistent approach to security operations.
• Provide senior on-call coverage for major incidents involving blocking issues.

What We're Looking For

• 8+ years in security operations, incident response, detection engineering, or an equivalent blue-team role.
• Bachelor’s degree in Information Systems, Cybersecurity, or a related field, or equivalent experience.
• Advanced certifications such as GCIA, GCIH, GCFA, GCDA, GNFA, GREM, OSCP, Microsoft SC-200 or equivalent are highly regarded.
• Expert knowledge of Windows, Linux, Active Directory, and Entra ID charge techniques; able to reconstruct an intrusion from raw logs without a playbook.
• Strong experience in cloud security monitoring and response across at least one major provider (AWS, Azure, or GCP).
• Proficiency in Python or PowerShell for automation, data analysis, and tooling integration.
• Deep solid understanding of MITRE ATT&CK, the incident response lifecycle, malware analysis, and phishing investigation.
• Track record of defining standards, processes, and playbooks, and of improving them based on evidence.
• Demonstrated ability to mentor analysts and raise the technical bar of a team.
• Clear, structured technical writing, including incident reports, RCAs, and briefings for senior technical and non-technical audiences.
• Strong influencing and teamwork skills; able to work with engineering, IT, and business groups locally and globally to promote change without direct authority.

This job description may have been reviewed and enhanced using AI-assisted tools to improve clarity, consistency, and inclusivity. All final content, role requirements and hiring decisions remain subject to human review and approval by Aristocrat.

Compensation Philosophy

We offer a comprehensive pay and benefits package designed to stay competitive in the market, support your wellbeing, and recognise your contribution to our success. Our approach is underpinned by a pay-for-performance belief in rewarding individual impact. Your specific compensation package will be determined by factors such as your skills, experience, qualifications, and location.

Depending on your role and location, you may be eligible for annual bonuses and incentives, health and wellbeing benefits, paid time off, retirement plans, insurance coverage, and other local or statutory benefits.

Specific details about compensation and benefits for this position will be discussed during the recruitment process.

About Aristocrat

Aristocrat Leisure Limited (Aristocrat) is a global entertainment and content creation company powered by technology to deliver world-leading casino and mobile games. Listed on the Australian Securities Exchange (ASX), Aristocrat (ASX code: ALL) is headquartered in Sydney, Australia, with over 7300 employees working in more than 20 locations across the globe. Aristocrat offers a diverse range of products and services including electronic gaming machines, casino management systems, mobile games and online real money games, including iLottery.

Aristocrat has seven corporate functions and three reporting segments that span regulated land-based gaming (Aristocrat Gaming), social casino (Product Madness) and regulated online real money gaming (Aristocrat Interactive). Our game and product portfolios collectively entertain millions of players worldwide every day.

Across our global enterprise, Aristocrat aims to create long-term sustainable value for all stakeholders by upholding our core values and producing the world’s best gaming content. Our people-first mindset prioritises the safety and wellbeing of our people. We have ambitions to be an industry leader in responsible gameplay and we invest in employees’ development and offer career pathways, so they have what they need to do their best work at Aristocrat.

Our values of Talent Unleashed, All About the Player, Collective Brilliance and Good Business, Good Citizen guide and inspire us every day. We are excited about the future of Aristocrat and united by our mission and we invite everyone to join us as we bring joy to life through the power of play!

Employment Equality Statement

Aristocrat Leisure Limited or its affiliates worldwide provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to any protected characteristic, such as race, color, sex, religion, national origin, physical or mental disability, genetic characteristic, pregnancy, breastfeeding or related medical condition, sexual orientation, gender identity, gender expression, ancestry, citizenship, age, marital, military and veteran status, or any other characteristic prohibited by local, state/provincial or federal law.

If you need assistance or accommodation applying for a position, please reach out to helpdesk-recruiting@aristocrat.com.

Empowering a Sustainable Future

At Aristocrat, sustainability is embedded in our strategy, operations and the values and culture of our teams across the globe.

Our Sustainability report provides information on the progress we’ve made each year, across our four strategic sustainability pillars – Good Governance & Responsible Business, Empowering Safer Play (formerly responsible gameplay), Operational Sustainability & Climate, and People & Community.

You can read more about our progress here: https://www.aristocrat.com/sustainability/