Security Detection Engineer, Take Two Interactive

• Bachelor’s degree in Computer Science, Information Security, or a related field (or equivalent work experience)
• 5+ years of experience as a security analyst and 2+ years as a detection engineer
• Proven experience in security, with a focus on threat detection, incident response, or security monitoring
• Solid understanding of SIEM platforms (e.g., Splunk, Elastic Stack, or similar), security tools (e.g., endpoint detection and response, Cloud based security systems, AWS/GCP/Azure) and security knowledge for detections in Microsoft Windows, Linux, MAC
• Proficient in developing and writing detection rules, queries, and scripts
• Experience with network traffic analysis, log management, and security event monitoring
• Experience performing threat hunting
• In-depth understanding of various attack vectors, malware analysis, and threat intelligence
• Familiarity with common attack frameworks, such as MITRE ATT&CK
• Experience with programming/scripting languages (e.g., Python, PowerShell, Bash) to build automation and to perform other tasks
• Ability to analyze large sets of data and identify patterns related to security incidents
• Excellent problem-solving and analytical skills
• Strong communication and collaboration skills to work across teams

Desirable

• We are looking for a Security Detection Engineer
• The perfect hire will be responsible for designing, developing, and maintaining sophisticated detection solutions to protect against security threats
• This candidate will work closely with the security operations and incident response teams to identify and mitigate threats while continuously improving detection capabilities
• Your expertise will directly contribute to safeguarding Take-Two and its labels systems, networks, and data
• You will work with Take-Two's information security teams, reporting to the Director of Detection Engineering
• In this role you will be a technical liaison to the SOC and other internal engineering teams
• What You’ll Take On:
• Develop sophisticated threat detection mechanisms that can effectively identify and raise alerts for any adversarial or high-risk behaviors within Take-Two's systems
• Develop, deploy, and maintain detection rules, policies, and configurations for SIEM (Security Information and Event Management) systems and other security tools
• Continuous improvement and fine-tuning of detection systems to effectively adapt to new and emerging cyber threats. This involves staying abreast of the latest threat landscape and ensuring that the detection systems are agile and responsive to evolving security challenges
• Participate in threat hunting activities to proactively identify vulnerabilities and potential attack vectors
• Document and report findings, actions taken, and recommendations for improving security posture
• Monitor and enhance critical detection systems to ensure their reliability and effectiveness in delivering robust detection capabilities. This involves proactive maintenance and optimization to uphold the integrity and performance of these systems
• Collaborate with partner teams such as the SOC and Threat Intel to establish and maintain meaningful security alerts by making sure they are relevant, actionable, and aligned with the overall security strategy
• Develop tools, systems, and programs to enhance and fortify Take-Two’s overall security posture. This includes contributing to the creation of innovative solutions to bolster Take-Two's defenses
• Remain informed about the latest security trends, emerging threats, and evolving technologies to ensure that Take-Two is well-prepared to adapt to security challenges. This includes continuous learning and keeping on top of industry developments to advise Take-Two's of their security strategy