Senior Cyber Security Analyst

PENN Entertainment, Inc. (https://www.pennentertainment.com/) is North America’s leading provider of integrated entertainment, sports content, and casino gaming experiences. From casinos and racetracks to online gaming, sports betting and entertainment content, we deliver the experiences people want, how and where they want them.

We’re always on the lookout for those who are passionate about creating and delivering cutting-edge online gaming and sports media products. Whether it’s through Hollywood Casino (https://about.hollywoodcasino.com/), theScore Bet Sportsbook (https://thescore.bet/), or theScore (https://www.thescore.com/) media app, we’re excited to push the boundaries of what’s possible. These state-of-the-art platforms are powered by proprietary in-house technology, a key component of PENN’s omnichannel gaming and entertainment strategy.

When you join PENN Entertainment’s digital team, you’ll not only work on these cutting-edge platforms through theScore and PENN Interactive, but you’ll also be part of a company that truly cares about your career growth. We’re committed to supporting you as you expand your skills and explore new opportunities.

With locations throughout North America, you can build a future at PENN Entertainment wherever you are. If you want to challenge conventions in gaming, media and entertainment, we want to talk to you.

About the Team & Role

As part of the team, you will be working with cross-functional teams of friendly and dedicated Engineers, Product Managers and Designers determined to deliver some of the best apps the market has to offer. You will be responsible for monitoring and responding to security events within our environment in addition to participating in security uplift initiatives by developing internal tools and processes to automate security workflow, perform integration work, and threat analysis.

About Work

• Serve as the primary technical contact for escalated security events, leading and coordinating incident response from triage through containment, remediation, and post-incident review.
• Develop and maintain automation for security workflows using scripting and orchestration to reduce manual Level 1 tasks.
• Monitor, investigate, and triage security alerts, abuse reports, and security events, using AI-assisted tools to accelerate enrichment, analysis, and prioritization.
• Create, tune, and optimize detection, correlation, and response content in SIEM, EDR, and other security platforms to improve threat detection and reduce alert fatigue.
• Conduct proactive threat hunting and detection validation, and continuously improve monitoring coverage.
• Develop and refine incident response processes, playbooks, and procedures for efficient handling of security incidents.
• Maintain expertise in current and emerging threats, including AI-driven attack techniques and abuse of generative AI platforms.
• Conduct vulnerability assessments, prioritize remediation, and validate corrective actions across infrastructure, applications, cloud services, and AI-enabled solutions.
• Evaluate and optimize security technologies, including AI-powered tools, that improve analyst efficiency and automate routine operations, and support the secure integration of new and existing systems into the security program.
• Support compliance and audit activities by gathering evidence, documenting controls, and assisting with remediation, including responsible and secure adoption of AI technologies.
• Collaborate effectively with peers and other departments to enhance security practices, uphold a culture of exceptional customer service, and promote continuous professional development through mentorship, industry best practices, and emerging AI security capabilities.
• Other duties as required.

About You

• 5+ years of experience in security operations, incident response, or a related field.
• Hands-on experience with SIEM and EDR platforms, including detection engineering and tuning.
• Working knowledge of scripting or automation (Python, PowerShell, or similar) and SOAR or orchestration tools.
• Experience with cloud security monitoring (AWS, Azure, or GCP).
• Familiarity with frameworks such as MITRE ATT&CK and NIST.
• Strong written and verbal communication, including the ability to brief technical and non-technical stakeholders during incidents.
• Preferred: GCIH, GCIA, GCFA, Security+, CySA+, or equivalent certification; experience in a regulated industry such as gaming, finance, or healthcare.

What We Offer

• Competitive compensation package.

• Comprehensive Benefits package.

• Fun, relaxed work environment.

• Education and conference reimbursements.

  #LI-REMOTE

Salary Range

$155,000—$185,000 USD

_Penn Interactive is proud to be an equal opportunity workplace. We will consider all qualified applicants for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability, veteran status, genetic information, or any other basis protected by applicable law.Base pay is one part of the Total Rewards that Penn Interactive provides to compensate and recognize employees for their work. Most sales positions are eligible for a Commission under the terms of an applicable plan, while most non-sales positions are eligible for a Bonus. Additionally, Penn Interactive provides best-in-class benefits to eligible employees. We believe that benefits should connect you to the support you need when it matters most, and should help you care for those who matter most. That’s why we provide an array of options, expert guidance and always-on tools, that are personalized to meet the needs of your reality – to help support you physically, financially and emotionally through the big milestones and in your everyday life.
_

- 5+ years of experience in security operations, incident response, or a related field. - Hands-on experience with SIEM and EDR platforms, including detection engineering and tuning. - Working knowledge of scripting or automation (Python, PowerShell, or similar) and SOAR or orchestration tools. - Experience with cloud security monitoring (AWS, Azure, or GCP). - Familiarity with frameworks such as MITRE ATT&CK and NIST. - Strong written and verbal communication skills. - Serve as the primary technical contact for escalated security events, leading and coordinating incident response. - Develop and maintain automation for security workflows. - Monitor, investigate, and triage security alerts and events. - Create, tune, and optimize detection, correlation, and response content in SIEM, EDR. - Conduct proactive threat hunting and detection validation. - Conduct vulnerability assessments, prioritize remediation, and validate corrective actions.