Security Analyst I [JR11046]

ABOUT DRAFTKINGS INC.

We’re defining what it means to build and deliver the most extraordinary sports and entertainment experiences. Our global team is trailblazing new markets, developing cutting-edge products, and shaping the future of responsible gaming.

Here, “impossible” isn’t part of our vocabulary. You’ll face some of the toughest but most rewarding challenges of your career. They’re worth it. Channeling your inner grit will accelerate your growth, help us win as a team, and create unforgettable moments for our customers.

THE CROWN IS YOURS

As a Security Analyst I, you will protect our digital infrastructure, including cloud environments, web applications, office and data center networks, and sensitive data, from various cyber threats. In this role, you will be responsible for triaging security events, managing vulnerabilities, coordinating security operations projects, and enhancing our defensive strategies. With access to best of class cybersecurity tools, you’ll play a key role in maintaining the integrity and safety of our infrastructure.

What you’ll do as a Security Analyst I

• Triage cybersecurity alerts as they come in and take necessary remediation or escalation paths.
• Protect our cloud environments, IT environments, web and mobile applications, and office and data center networks in order to maintain operational excellence of DraftKings security posture.
• Perform vulnerability assessments on all corporate systems, including user endpoints, servers, production workloads, and other infrastructure.
• Lead small to mid-sized Security Operations projects such as alert tuning, automation, scripting, and coding.
• Coordinate with other Draftkings’ teams to manage vulnerabilities and risk.
• Test the effectiveness of security measures by participating in pentesting exercises.
• Ability to effectively communicate security concepts to stakeholders and recommend risk mitigation steps to the team.

What you’ll bring

• At least 2 years of cybersecurity work experience.
• Professional experience triaging alerts from Endpoint Detection and Response (EDR) tools such as CrowdStrike and Microsoft Defender.
• Fundamental understanding of public cloud computing platforms like AWS, or GCP and applying that understanding to triaging security alerts from Cloud Detection and Response tools.
• Professional experience using incident response procedures and assisting security investigations.
• Excellent written and oral communication skills for cross team and vertical collaboration.
• Familiarity with vulnerability management platforms such as Rapid7 or Qualys.
• Security+, AWS Solutions architect associate, CEH, or CISSP certifications are a plus.
• Understanding of vulnerability rating systems such as CVE, CWE, OWASP Top 10.
• Experience with programming or scripting languages such as Python or PowerShell.

JOIN OUR TEAM

Being part of the DraftKings Inc. team means you’re always looking for new ways to break out of the box. Whether you’re data-obsessed, tech-driven, or love working with different people each day, you’ll solve some of the most exciting challenges in our industry and be supported from your very first day.

READY TO OWN WHAT’S NEXT?

We know finding a new job can be intimidating. Don’t let imposter syndrome stop you from applying! Even if you don’t think you tick off every box in this job description, we’d still love for you to apply or join our Talent Community.

We’re proud to be an equal-opportunity employer. We do not tolerate discrimination of any kind and are committed to providing equal employment opportunities regardless of your gender identity, race, nationality, religion, sexual orientation, status as a protected veteran, or status as an individual with a disability.