Senior Cyber Defense Operations Analyst

At the core of Epics success are talented passionate people. Epic prides itself on creating a collaborative welcoming and creative environment. Whether its building award-winning games or crafting engine technology that enables others to make visually stunning interactive experiences were always innovating.

Being Epic means being a part of a team that continually strives to do right by our community and users. Were constantly innovating to raise the bar of engine and game development.

Keep Epics networks hardware and people safe from security risks. Install security measures and operate software to protect systems and information infrastructure including firewalls and encryption programs. Document issues as they arise and assess & report any impact caused.

Epics Security Operations Center protects one of the worlds largest player communities along with the people infrastructure and technology that support it. As a Senior CDO Analyst you will lead investigations and incident response while helping reinvent how the SOC operates turning repeatable analysis into automated Al-assisted workflows so the team can focus on the threats that matter most.

• Lead the triage investigation and response for security alerts and incidents across cloud corporate endpoint identity and production environments
• Act as an escalation point and incident lead coordinating with programming legal privacy and business partners through containment remediation and post-incident review
• Drive the detection lifecycle management developing tuning and retiring detection logic to maximize signal-to-noise ratio minimize alert fatigue and close emerging threat gaps
• Identify recurring analyst work and partner with security programming to automate it including Al-agent workflows with clear validation and human review where it counts
• Turn threat intelligence and emerging vulnerabilities into rapid exposure assessments and actionable response across the company
• Develop and maintain playbooks runbooks and operational metrics that make the SOC faster more consistent and easier to scale
• Set and elevate standards for investigation quality and case documentation actively coaching analysts and holding managed-service partners accountable to rigorous SLAs and analytical depth

• 5 years of experience in security operations incident response or threat detection including leading investigations end-to-end
• Deep hands-on experience with SIEM and EDR platforms (e.g. Splunk Google SecOps CrowdStrike NGSIEM etc.) and writing effective queries and detections
• Strong understanding of attacker tradecraft and frameworks such as MITRE ATT&CK with the ability to reconstruct activity from logs and telemetry
• Experience investigating in cloud environments (AWS and/or GCP) SaaS and identity platforms
• Scripting or programming skills (Python or similar) and a drive to automate repetitive work; SOAR experience is a plus
• Curiosity about Al and emerging technology and interest in applying them to security operations responsibly
• Calm decisive judgment under pressure with the ability to prioritize competing incidents and communicate clearly to technical and executive audiences
• Strong written communication with a high standard for incident documentation and reporting
• A self-directed ownership-driven approach and a willingness to challenge how things have always been done

We pay 100% for benefits for both employees and dependents and offer coverage for supplemental medical dental vision critical illness telemedicine Life and AD&D long term disability insurance as well as weekly indemnity (short term disability) and a retirement savings plan with a competitive employer addition to the EAP (employee assistance program) we also offer a robust mental well-being program through Modern Health which provides free therapy and coaching for employees & dependents.

The expected annual base pay range(s) for this position are detailed below. Each base pay range is relevant only for individuals who are residents of or will be expected to work within the specified locale. Compensation varies based on a variety of factors which include (but arent limited to) things such as skills and competencies qualifications knowledge and addition to base pay most employees are eligible to participate in Epics generous benefit plans and discretionary incentive programs (subject to the terms of those plans or programs).

Epic Games is a leading interactive entertainment company. For over 30 years weve been making award-winning games and engine technology that empowers others to make visually stunning games and 3D content that bring environments to life like never before. Epics award-winning Unreal Engine technology not only provides game developers the ability to build high-fidelity interactive experiences for PC console mobile and VR it is also a tool being embraced by content creators across a variety of industries such as media and entertainment automotive and architectural design. As we continue to build our Engine technology and develop remarkable games we strive to build teams of world-class talent.

Epic Games deeply values diverse teams and an inclusive work culture and we are proud to be an Equal Opportunity employer. Learn more about our Equal Employment Opportunity (EEO) Policy here.

Note to Recruitment Agencies: Epic does not accept any unsolicited resumes or approaches from any unauthorized third party (including recruitment or placement agencies) (i.e. a third party with whom we do not have a negotiated and validly executed agreement). We will not pay any fees to any unauthorized third party. Further details on these matters can be found here.