高级安全分析师
Senior Security Analyst
在DraftKings，AI正成为我们当下和未来的重要组成部分，推动着当前工作的开展，指导更明智的决策，并激发大胆的想法。它正在改变我们提升客户体验、优化运营和开拓新可能的方式。我们的团队充满创新精神，积极拥抱新兴技术。我们不等待未来到来，而是通过一步步的勇敢行动来塑造它。对于那些将AI视为进步驱动力的人，欢迎与我们一同打造未来。
王冠属于你
作为高级安全分析师，你将领导调查工作，保护我们的客户以及DraftKings背后的系统，在企业及生产环境中协作。在这个职位上，你将成为高级别问题的处理者，跨端点、身份系统、云环境和生产负载进行工作。你将负责最复杂的调查，处理没有既定流程的事件，并在指导其他分析师的同时加强团队的响应能力。
你将负责
- 在端点、身份系统、云环境和生产负载中主导安全调查，涵盖初步评估、根本原因分析、遏制和清除。
- 在你的区域担任事件指挥官，协调IT、工程、法律、人力资源和其他团队的并行工作。
- 调查没有现有流程的案例：决定收集哪些数据，构建分析工具，并为后续使用记录下来。
- 撰写并同行评审案件摘要、事件报告和时间线。
- 寻找新型威胁，如AI辅助的入侵或供应链攻击。将发现转化为遥测、检测和自动化，提高警报质量并减少手动工作。
- 与安全工程团队合作，推动事件后的加固措施，并通过案件回顾、升级支持和知识分享指导分析师。
你将带来的
- 至少6年的网络安全经验，包括4年以上的事件响应、取证、威胁情报或威胁狩猎经验。
- 有在缺乏监督的情况下处理重大事件的经验，能够在时间压力和信息不全的情况下工作，包括向管理层汇报和撰写针对工程师和高管的事件后报告。
- 对当前攻击者行为有深入了解，包括内部威胁，以及MITRE ATT&CK、钻石模型、杀伤链等框架，能够在调查过程中评估攻击者的技能水平。
- 熟练掌握Python、React、Kubernetes、Stripe等技术工具
查看英文原文
At DraftKings, AI is becoming an integral part of both our present and future, powering how work gets done today, guiding smarter decisions, and sparking bold ideas. It’s transforming how we enhance customer experiences, streamline operations, and unlock new possibilities. Our teams are energized by innovation and readily embrace emerging technology. We’re not waiting for the future to arrive. We’re shaping it, one bold step at a time. To those who see AI as a driver of progress, come build the future together.
The Crown Is Yours
As a Senior Security Analyst, you'll lead investigations that protect our customers and the systems behind DraftKings, working across corporate and production environments. In this role, you'll operate as the senior escalation point, working across endpoint, identity systems, cloud environments, and production workloads. You'll own our most complex investigations, navigate incidents without an established playbook, and strengthen how the team responds while mentoring other analysts.
What You'll Do
- Lead security investigations across endpoint, identity systems, cloud environments, and production workloads, covering triage, root-cause analysis, containment, and eradication.
- Act as incident commander in your region, coordinating parallel work across IT, Engineering, Legal, HR, and other teams.
- Investigate cases with no existing playbook: decide what data to collect, build the tools to analyze it, and document it for reuse.
- Write and peer-review case summaries, incident reports, and timelines.
- Hunt for novel threats, such as AI-assisted intrusions or supply-chain compromise. Convert findings into telemetry, detections, and automation that raise alert quality and reduce manual work.
- Drive post-incident hardening with Security Engineering and mentor analysts through case review, escalation support, and knowledge sharing.
What You'll Bring
- At least 6 years in cybersecurity, including 4 or more years in incident response, forensics, threat intelligence, or threat hunting.
- Experience running major incidents with little supervision, under time pressure and incomplete facts, including briefing leadership and writing the post-incident reports for both engineers and executives.
- Deep knowledge of how attackers operate today, including insider threat, and the frameworks such as MITRE ATT&CK, the Diamond Model, the kill chain, with the ability to assess an attacker’s capabilities as an investigation unfolds..
- Hands-on experience with SIEM, EDR/NDR, and CSPM tooling.
- Monitoring experience in endpoint, identity, SaaS or CI/CD environments, including incident investigation in at least one major cloud environment, such as AWS, Azure, or GCP.
- Practical scripting skills in Python, PowerShell or a similar language, with experience utilizing YARA-L, Sigma, KQL, SPL or similar for investigation queries and detections.
Join Our Team
We’re a publicly traded (NASDAQ: DKNG) technology company headquartered in Boston. As a regulated gaming company, you may be required to obtain a gaming license issued by the appropriate state agency as a condition of employment. Don’t worry, we’ll guide you through the process if this is relevant to your role.
Originally posted on Himalayas