Information Security Analyst

THE ROLE:

ProbablyMonsters is currently seeking an Information Security Analyst to help monitor, protect, and strengthen the security of the data, assets, and systems that enable us to make world-class games. Do you enjoy investigating alerts, digging into security events, and collaborating with teams to reduce risk? Are you looking for a role where your attention to detail and curiosity make a real difference? If so, we may be looking for you!

Our Information Security team supports organizations across our family of studios by monitoring security systems, analyzing threats, supporting incident response, and helping users navigate security best practices. Join our family of studios and play a key role in protecting the availability and integrity of our teams, our assets, and our customers.

WHO YOU ARE:

You are a security professional who is comfortable working in dynamic, technology-heavy environments.

You are an effective communicator with experience working across teams and departments, seeking ways to promote a culture of trust and respect.

You are a team player who enjoys collaborating to solve problems.

You are someone with strong time management and prioritization skills.

You are curious and enjoy investigating alerts, events, and anomalies to understand what is really happening.

You are comfortable working with moderate supervision and asking for guidance when requirements are unclear.

You are a gamer or someone familiar with video gaming and the games industry.

You enjoy engaging with teams to understand their needs and help them navigate security requirements.

You stay current with trends and news in the security space and are excited to keep learning.

WHAT YOU WILL DO:

Monitor security systems and tools — including SIEM, EDR, and network security platforms — for alerts, anomalies, and potential threats; triage and escalate incidents in accordance with established playbooks and severity guidelines

Support the review and monitoring of network, systems, and tools for compliance with company security standards

Assist in the investigation of security events and incidents, documenting findings and participating in post-incident reviews

Help evaluate new security technologies and processes and provide feedback to senior engineers

Confer with users to discuss issues such as access needs, security tool questions, and potential security violations

Deliver security awareness training and promote a security-conscious culture across studio teams

Support AI/ML security monitoring efforts by flagging suspicious usage patterns in generative AI tools and escalating potential policy violations

Assist in maintaining accurate asset inventories and vulnerability tracking data across studio and cloud environments

QUALIFICATIONS:

Working knowledge of information security concepts and practices, including endpoint security, network security, vulnerability management, identity and access management, and security event monitoring

Ability to learn new technologies and security tools quickly; good analytical and problem-solving skills with the ability to manage multiple tasks

Experience using or exposure to security platforms such as SIEM, EDR, antivirus, firewall, and content filtering solutions in a monitoring or support capacity

Familiarity with networking fundamentals including TCP/IP, HTTP/HTTPS, DNS, firewalls, and proxies

Basic understanding of cloud environments (AWS or Azure) and awareness of how cloud-hosted systems differ from on-premises security considerations

Familiarity with Microsoft Windows environments, Active Directory, and basic concepts around permissions and group policy

Understanding of Linux and Windows operating system fundamentals and common hardening practices

Ability to adapt to changing priorities and proactively flag problems or risks with systems, tools, and processes

Working knowledge of the CrowdStrike Falcon platform, with exposure to one or more modules including Endpoint Detection and Response (EDR/Falcon Insight), Identity Threat Protection (Falcon ITP), Cloud Security (Falcon Cloud Security/CSPM), Exposure Management and Vulnerability Management (Falcon Spotlight), or SaaS Security Posture Management; ability to monitor dashboards, review detections, and follow up on alerts within the platform

Awareness of AI/ML security risks such as prompt injection, data leakage through generative AI tools, and insecure API integrations; familiarity with responsible AI usage policies and the ability to help enforce them

Familiarity with identity and access management concepts including MFA, SSO, and least-privilege access principles

Awareness of common compliance frameworks (NIST CSF, CIS Controls, SOC 2) and how they translate into day-to-day security practices

PREFERRED SKILLS:

Experience with AWS and/or Azure cloud environments and familiarity with their native security tools and dashboards

Exposure to Microsoft 365 security features, Defender, and Az…