At Aristocrat, we are passionate about delivering world-class gaming experiences that bring happiness to millions of players worldwide. We are seeking an exceptionally skilled Security Operations Analyst (Tier 2) to join our team. As part of our Security Operations Center, you will play a crucial role in protecting our digital assets and maintaining our flawless security standards. This position offers an outstanding opportunity to collaborate with global teams, grow within a structured mentoring program, and build your career in a modern SOC environment. If you are ambitious and ready to compete at the highest level, this role is for you!
What You'll Do
- Own MSSP customer concerns and medium/high-severity alerts from start to finish. Scope the activity and build the timeline. Identify indicators of compromise (IOCs) and investigate endpoint, identity, network, and cloud data to reach a defensible conclusion.
- Review a sample of MSSP triage for quality, offering tuning, detection-gap, and escalation-criteria feedback to the MSSP.
- Triage phishing (header analysis, sandboxing), malware (static & sandbox), and credential-compromise investigations.
- Complete containment and remediation within approved playbooks — host isolation, account disablement, credential reset, IOC blocking — and record every action taken.
- Raise issues to senior specialists with a full set of information: hypothesis, evidence, actions taken, current risk, and specific ask; send well-understood benign patterns back to the MSSP along with a detailed disposition and the missing playbook step.
- Build and run queries across our SIEM, EDR, and SOAR platforms and MSSP tooling to support investigations and reporting.
- Identify detection and tuning gaps. Flag false positives and propose tuning, suppression, or enrichment with supporting evidence. Test and validate detection changes shipped by the detection engineering team.
- Document every case to a high standard. Ensure it is complete, accurate, and reproducible by someone not on shift. Accept peer and lead QA review. Act on feedback within the same cycle.
- Support specialist-led threat hunts and incident response — evidence gathering and technical analysis from detection through root cause analysis (RCA).
- Contribute to playbook, runbook, and knowledge-base improvements drawn from your own casework.
- Participate in the 24x7 rotating shift roster, including on-call and occasional weekend coverage.
What We're Looking For
- 2+ years of hands-on SOC / security operations experience, with ownership of investigations beyond initial triage.
- A bachelor's degree in information systems, cybersecurity, or a related field, or equivalent experience.
- Query proficiency on our CrowdStrike stack — CrowdStrike Query Language (CQL) — or transferable SIEM query experience (e.g., KQL, SPL); plus hands-on EDR (live response, process-tree analysis, host isolation).
- Working knowledge of Windows, Linux, and Active Directory (AD) / Entra ID attack patterns; comfortable reading authentication, process, and network logs without a playbook.
- A solid grasp of the incident-response process, phishing and malware investigations; MITRE ATT&CK for mapping observed behavior.
- Nice to have: Security+, ISC2 SSCP, Microsoft SC-200, CrowdStrike (CCFA/CCFR), Blue Team Level 1/2 (BTL1/BTL2), GCIA, GCIH, or CySA+ certifications.
- Cloud security monitoring (AWS, Azure, or GCP); scripting (Python or PowerShell); SOAR/automation.
- Exposure to detection tuning or threat hunting.
Join us at Aristocrat and be part of a team that strives for excellence in every aspect of our operations. Together, we can achieve great things and make an impact on the gaming community worldwide!
This job description may have been reviewed and enhanced using AI-assisted tools to improve clarity, consistency, and inclusivity. All final content, role requirements and hiring decisions remain subject to human review and approval by Aristocrat.
We offer a comprehensive pay and benefits package designed to stay competitive in the market, support your wellbeing, and recognise your contribution to our success. Our approach is underpinned by a pay-for-performance belief in rewarding individual impact. Your specific compensation package will be determined by factors such as your skills, experience, qualifications, and location.
Depending on your role and location, you may be eligible for annual bonuses and incentives, health and wellbeing benefits, paid time off, retirement plans, insurance coverage, and other local or statutory benefits.
Specific details about compensation and benefits for this position will be discussed during the recruitment process.
Skills Required
- 2+ years of hands-on SOC or security operations experience, including ownership of investigations beyond initial triage
- Bachelor's degree in information systems, cybersecurity, or a related field, or equivalent experience
- Proficiency with CrowdStrike Query Language or transferable SIEM query languages such as KQL or SPL
- Hands-on EDR experience, including live response, process-tree analysis, and host isolation
- Working knowledge of Windows, Linux, Active Directory, and Entra ID attack patterns
- Experience reading authentication, process, and network logs without a playbook
- Knowledge of incident response, phishing and malware investigations, and MITRE ATT&CK
- Security+, ISC2 SSCP, Microsoft SC-200, CrowdStrike CCFA or CCFR, BTL1 or BTL2, GCIA, GCIH, or CySA+ certification
- Cloud security monitoring experience with AWS, Azure, or GCP
- Scripting experience with Python or PowerShell
- SOAR or security automation experience
- Exposure to detection tuning or threat hunting
- Availability for a 24x7 rotating shift roster, on-call coverage, and occasional weekends
Aristocrat Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Aristocrat and has not been reviewed or approved by Aristocrat.
-
Healthcare Strength — Healthcare coverage is described as robust, with medical, dental, and vision options that are frequently highlighted alongside wellness resources. Feedback suggests these benefits are a core strength of the package.
-
Retirement Support — A 401(k) with employer matching is commonly noted, with match levels reported around 4–5% depending on plan or period. This is seen as a solid foundation for long-term savings.
-
Parental & Family Support — Paid parental leave plus adoption and surrogacy assistance are referenced as part of the offering. These benefits contribute to a family-friendly reputation.
Aristocrat Insights
What We Do
Aristocrat Leisure Limited is an ASX20 listed company and one of the world’s leading providers of gaming solutions. We’re licensed in over 300 jurisdictions and operate in over 90 countries around the world. We’re also proud to have a team of over 6500 employees that deliver outstanding results by pushing the boundaries of innovation, creativity and technology each day. We offer a diverse range of products and services including electronic gaming machines, social gaming and casino management systems, but it doesn’t stop there. Despite our global presence and exponential growth, we remain an ideas company at heart that is committed to delivering outstanding results for our customers and players and an unparalleled experience for our employees, who have the opportunity to grow, be inspired and be the best they can be. Our values of Talent Unleashed, All About the Player, Collective Brilliance and Good Business, Good Citizen guide and inspire us to live our mission of bringing joy to life through the power of play – every day. Come and join us – let’s play!
Why Work With Us
Individually we’re great, but together we’re brilliant. Our employees are the beating heart of our business and we attract the best people in the industry thanks to our unique and inspiring culture. Come and join the team and help bring joy to life through the power of play.
Gallery
