SOC Analyst

Rush Street Interactive (NYSE: RSI) is a market leader in online casino and sports betting, currently operating real-money gaming with our brands: BetRivers.com, PlaySugarHouse.com, and RushBet.co. We’re building bridges between online, social and land-based gaming businesses to create amazing, integrated experiences that keep players in the game.

We are looking for a SOC Analyst to join our Security Operations team and play a key role in protecting the organization's information systems. In this role, you will monitor security systems for suspicious or anomalous activities, review and investigate alerts to identify genuine threats, and respond to incidents by following the incident response playbooks. You will support our vulnerability management efforts and work closely with colleagues across the organization to ensure incidents are handled effectively and efficiently.

What You'll Do:

• Monitor SIEM and other security platforms, reviewing logs, events, and alerts for suspicious or anomalous activity
• Investigate and classify security alerts and anomalies, eliminate false positives, correlate activity with known attack patterns, and prioritize confirmed incidents based on severity and potential impact
• Respond promptly to security incidents by following established incident response playbooks    
• Own the creation, maintenance, and continuous improvement of playbooks and other relevant documentation, including policies and procedures 
• Participate in the vulnerability management process   
• Collaborate with internal stakeholders to support incident response and threat mitigation efforts, including correlating alerts with known attack patterns 
• Maintain and tune security monitoring systems and detection rules, identify detection coverage gaps, and recommend or implement enhancements
• Document incidents, findings, and remediation steps in detailed reports 
• Support forensic investigations and evidence collection when required 

What You'll Bring:

• Bachelor’s degree in information technology, Information Security, or a related field, or equivalent relevant work experience
• 2+ years of experience in a cybersecurity role 
• GSEC, GCIH, CompTIA, BTL1, BTL2 or relevant cybersecurity vendor certificates     
• Experience with security operations center processes   
• Experience in documenting and maintaining processes and procedures  
• Knowledge of the ITIL framework is considered as an advantage   
• Hands-on experience with SIEM management, Vulnerability Scanners and XDR tools   
• Knowledge of network infrastructure, including routers, switches, firewalls, VPN, and associated network protocols and concepts