Senior Security Analyst

DraftKings Inc.

. Lead security investigations across endpoint, identity systems, cloud environments, and production workloads, including triage, root-cause analysis, containment, and eradication .

Posted 9/23/2026full-timeRemote • BulgariaSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in cybersecurity with a focus on incident response, threat hunting, and forensics. Proficient in utilizing SIEM, EDR/NDR, and CSPM tools while mentoring teams and driving post-incident improvements.

Highest-signal resume keywords

Incident ResponseThreat HuntingCybersecuritySIEM ToolsMITRE ATT&CK

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Incident InvestigationForensicsThreat IntelligenceScripting in PythonYARA-LSigmaKQLSPLRoot-Cause AnalysisData Collection

Soft Skills

LeadershipMentoringCommunicationCollaborationProblem-Solving

Tools & Technologies

EDR/NDRCSPMSIEMCloud EnvironmentsAWSAzureGCP

Certifications & Qualifications

Gaming License

Industry Keywords

AI-Assisted IntrusionsSupply-Chain CompromiseInsider ThreatDiamond ModelKill Chain

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityGoogle Cloud PlatformPython

About the role

Key responsibilities & impact

Lead security investigations across endpoint, identity systems, cloud environments, and production workloads, including triage, root-cause analysis, containment, and eradication
Act as incident commander in the region, coordinating parallel work across IT, Engineering, Legal, HR, and other teams
Investigate cases without existing playbooks by deciding what data to collect, building analysis tools, and documenting findings for reuse
Write and peer-review case summaries, incident reports, and timelines
Hunt for novel threats such as AI-assisted intrusions and supply-chain compromise
Convert threat-hunting findings into telemetry, detections, and automation to improve alert quality and reduce manual work
Drive post-incident hardening with Security Engineering
Mentor analysts through case review, escalation support, and knowledge sharing

Requirements

What you’ll need

At least 6 years in cybersecurity, including 4 or more years in incident response, forensics, threat intelligence, or threat hunting
Experience running major incidents with little supervision, under time pressure and incomplete facts
Experience briefing leadership and writing post-incident reports for engineers and executives
Deep knowledge of current attacker behavior, including insider threat
Knowledge of MITRE ATT&CK, the Diamond Model, and the kill chain
Hands-on experience with SIEM, EDR/NDR, and CSPM tooling
Monitoring experience in endpoint, identity, SaaS, or CI/CD environments
Incident investigation experience in at least one major cloud environment, such as AWS, Azure, or GCP
Practical scripting skills in Python, PowerShell, or a similar language
Experience using YARA-L, Sigma, KQL, SPL, or similar investigation queries and detections
May be required to obtain a gaming license issued by the appropriate state agency as a condition of employment

Benefits

Comp & perks

Guidance through the gaming license process if relevant to the role