[Hiring] Senior Cyber Defense Operations Analyst @Epic Games

Role Description

Epic's Security Operations Center protects one of the world's largest player communities, along with the people, infrastructure, and technology that support it. As a Senior CDO Analyst, you will lead investigations and incident response while helping reinvent how the SOC operates, turning repeatable analysis into automated, AI-assisted workflows so the team can focus on the threats that matter most.

In this role, you will:

• Lead the triage, investigation, and response for security alerts and incidents across cloud, corporate, endpoint, identity, and production environments.
• Act as an escalation point and incident lead, coordinating with programming, legal, privacy, and business partners through containment, remediation, and post-incident review.
• Drive the detection lifecycle management, developing, tuning, and retiring detection logic to maximize signal-to-noise ratio, minimize alert fatigue, and close emerging threat gaps.
• Identify recurring analyst work and partner with security programming to automate it, including AI-agent workflows with clear validation and human review where it counts.
• Turn threat intelligence and emerging vulnerabilities into rapid exposure assessments and actionable response across the company.
• Develop and maintain playbooks, runbooks, and operational metrics that make the SOC faster, more consistent, and easier to scale.
• Set and elevate standards for investigation quality and case documentation, actively coaching analysts and holding managed-service partners accountable to rigorous SLAs and analytical depth.

Qualifications

• 5+ years of experience in security operations, incident response, or threat detection, including leading investigations end-to-end.
• Deep hands-on experience with SIEM and EDR platforms (e.g., Splunk, Google SecOps, CrowdStrike NGSIEM, etc.) and writing effective queries and detections.
• Strong understanding of attacker tradecraft and frameworks such as MITRE ATT&CK, with the ability to reconstruct activity from logs and telemetry.
• Experience investigating in cloud environments (AWS and/or GCP), SaaS, and identity platforms.
• Scripting or programming skills (Python or similar) and a drive to automate repetitive work; SOAR experience is a plus.
• Curiosity about AI and emerging technology, and interest in applying them to security operations responsibly.
• Calm, decisive judgment under pressure, with the ability to prioritize competing incidents and communicate clearly to technical and executive audiences.
• Strong written communication, with a high standard for incident documentation and reporting.
• A self-directed, ownership-driven approach and a willingness to challenge how things have always been done.

Location

This role is open to multiple locations in North America (excluding CA, NY, & WA).

Company Description

Epic Games is a leading interactive entertainment company. For over 30 years we've been making award-winning games and engine technology that empowers others to make visually stunning games and 3D content that bring environments to life like never before. Epic's award-winning Unreal Engine technology not only provides game developers the ability to build high-fidelity, interactive experiences for PC, console, mobile, and VR, it is also a tool being embraced by content creators across a variety of industries such as media and entertainment, automotive, and architectural design. As we continue to build our Engine technology and develop remarkable games, we strive to build teams of world-class talent.

Like what you hear? Come be a part of something Epic!

Epic Games deeply values diverse teams and an inclusive work culture, and we are proud to be an Equal Opportunity employer.