Security Operations Analyst

We're defining what it means to build and deliver the most extraordinary sports and entertainment experiences. Our global team is trailblazing new markets, developing cutting-edge products, and shaping the future of responsible gaming.
Here, "impossible" isn't part of our vocabulary. You'll face some of the toughest but most rewarding challenges of your career. They're worth it. Channeling your inner grit will accelerate your growth, help us win as a team, and create unforgettable moments for our customers.
The Crown Is Yours
As a Security Operations Analyst, you will protect our digital infrastructure, including cloud environments, web applications, office and data center networks, and sensitive data, from various cyber threats. In this role, you will collaborate across teams to manage vulnerabilities, coordinate security operations projects, and enhance our defense strategies through red and blue team exercises. With access to the latest cybersecurity tools, you'll play a key role in maintaining the integrity and safety of our infrastructure.
What you'll do as a Security Operations Analyst

• Triage cybersecurity alerts as they come in and take necessary remediation or escalation paths.
• Protect our cloud environments, IT environments, web and mobile applications, and office and data center networks.
• Perform vulnerability assessments on all corporate systems, including user endpoints, servers, production workloads, and other infrastructure.
• Lead small to mid-sized Security Operations projects such as alert tuning, automation, scripting, and coding.
• Coordinate with Site Reliability, Operations, and Web development teams to manage vulnerabilities and risk.
• Test the effectiveness of security measures by participating in red-team and blue-teaming exercises.

What you'll bring

• At least 2 years of cybersecurity work experience.
• Professional Experience triaging alerts from enterprise-grade anti-malware and Endpoint Detection and Response tools such as Carbon Black or Microsoft Defender.
• Solid understanding of public cloud computing platforms like AWS, GCP, or Azure.
• Security+, AWS Solutions architect associate, CEH, or CISSP certifications are a plus.
• Extensive understanding of vulnerability rating systems such as CVE, CWE, OWASP Top 10.
• Experience with programming or scripting languages such as Python, Ruby, or Shell.
• Familiarity with any vulnerability management platform such as Rapid7, Nessus, Teneble, or Qualys.

#LI-TK1
#LI-HYBRID
Join Our Team
We're a publicly traded (NASDAQ: DKNG) technology company headquartered in Boston. As a regulated gaming company, you may be required to obtain a gaming license issued by the appropriate state agency as a condition of employment. Don't worry, we'll guide you through the process if this is relevant to your role.