Security Operations Engineer

About this role

FanDuel Group seeks a Security Operations Engineer to detect, investigate, and respond to security threats in a hybrid cloud environment. This SOC role combines threat hunting, incident response, and proactive security improvements to protect customer and proprietary data.

What you'll do

• Monitor network, server, endpoint, database, and application activities for compromise indicators while minimizing false positives
• Lead incident response efforts including remediation and root cause analysis
• Automate alert collection, prioritization, and security processes through scripting and orchestration
• Drive threat hunting initiatives to proactively identify and mitigate emerging security threats
• Develop security detections using YAML/JSON and maintain incident response playbooks
• Collaborate with cross-functional teams on security posture improvements using MITRE ATT&CK framework

What they're looking for

• SIEM platform operation and alert tuning
• IDS/IPS configuration and management
• Incident response and threat hunting
• Bash, Python, PowerShell scripting
• Log parsing, grok patterns, regular expressions
• MITRE ATT&CK framework application
• Cloud security (AWS, GCP, O365)
• Windows and Linux system administration

Likely interview questions

• Walk us through your incident response process—how would you handle an alert indicating potential data exfiltration?
• Describe a threat hunting project you led. How did you identify the threat and what was the outcome?