SOC Analyst monitoring threats and responding to incidents for Rush Street Interactive’s online casino and sports betting platforms. Supporting vulnerability management, detection tuning, and forensic investigations.
Responsibilities
Monitor SIEM and other security platforms, reviewing logs, events, and alerts for suspicious or anomalous activity
Investigate and classify security alerts and anomalies, eliminate false positives, correlate activity with known attack patterns, and prioritize confirmed incidents
Respond to security incidents by following established incident response playbooks
Create, maintain, and continuously improve playbooks, policies, procedures, and other documentation
Participate in the vulnerability management process
Collaborate with internal stakeholders on incident response and threat mitigation
Maintain and tune security monitoring systems and detection rules
Identify detection coverage gaps and recommend or implement enhancements
Document incidents, findings, and remediation steps in detailed reports
Support forensic investigations and evidence collection when required
Requirements
Bachelor’s degree in information technology, Information Security, or a related field, or equivalent relevant work experience
2+ years of experience in a cybersecurity role
GSEC, GCIH, CompTIA, BTL1, BTL2 or relevant cybersecurity vendor certificates
Experience with security operations center processes
Experience documenting and maintaining processes and procedures
Knowledge of the ITIL framework is an advantage
Hands-on experience with SIEM management, vulnerability scanners, and XDR tools
Knowledge of network infrastructure, including routers, switches, firewalls, VPN, and associated network protocols and concepts
Strong team-oriented interpersonal skills and ability to interface with vendors and technical and non-technical audiences
Strong client focus and ability to manage expectations and build long-term relationships
Able to travel occasionally both domestically and internationally
Benefits
Comprehensive health coverage (medical, prescription drugs, vision, and paramedical services)
Competitive dental plan with strong coverage for basic, major, and orthodontic services
Annual Health Care Spending Account (HCSA)
24/7 virtual healthcare access for you and your eligible dependents
Life, disability, and AD&D insurance
Mental health support and rewards programs
RRSP and company DPSP contribution, up to 100% of the first 4%
Security Operations Engineer operating SIEM and SOAR capabilities for Alpaca, a global brokerage infrastructure provider. Building detections, automating incident response, and improving security operations.
Senior Manager leading BDO Canada's security operations, threat detection, and incident response. Managing cyber risk, security capabilities, and a high - performing cybersecurity team.
Senior Manager leading BDO Canada’s cybersecurity monitoring, threat detection, incident response, and security team. Driving operational risk reduction across enterprise and cloud environments.
Senior security leader directing Affirm’s global incident response and investigations. Building scalable detection, readiness, and AI - enabled security capabilities for fintech payments.
Senior security leader directing global investigations and incident response for Affirm’s transparent fintech payment platform. Building scalable response, AI - enabled workflows, and executive risk reporting.
Staff Security Operations Specialist building AI - powered threat detection and response for ShareGate, a Microsoft 365 migration and governance platform. Automating triage, investigations and developer remediation workflows.
Staff Security Operations Specialist automating threat detection and incident response across Workleap and ShareGate. Building trusted security agents and detection pipelines for a workplace software company.
Spécialiste Staff en opérations de sécurité chez Workleap, éditeur de logiciels de travail et de migration Microsoft 365. Automatisation de la détection, des enquêtes et de la réponse par des agents IA.
Security Engineer building LiveKit’s vulnerability management and security operations program. Securing infrastructure for the company’s voice, video, and AI application platform.