Cybersecurity Analyst II

At CEC Entertainment, we build careers around great food, family and fun! Our purpose and our passion is to create the best place for kids and families to eat and play!

CEC Entertainment is the global leader in family entertainment and operator of Chuck E. Cheese and Peter Piper restaurants. CEC Entertainment is rapidly adapting to the ever-evolving business environment. The Information Technology portfolio is built on vendor, SaaS, and cloud solutions. We are continuously investing in store solutions, online and mobile services, and core systems including HCM, Payroll, and Financials to improve business operations and drive value. Key partner platforms include NCR Aloha, OLO, Workday, Cisco, Fortinet, and Microsoft O365 and Azure. This creates opportunities for creative and motivated professionals to engage across the business to plan and deliver new and improved solutions.

We are seeking a Cybersecurity Analyst II to join our SOC team. This position is based at our Corporate Support Center in Irving, TX and reports to the Manager, Cybersecurity Operations. The Cybersecurity Analyst II plays an important role defining and building technical and business requirements for data protection to reduce cyber threats, monitoring, managing, and maintaining network security and performance, and developing plans around remediating active threats.

The individual will be responsible for the daily monitoring and remediation of cybersecurity threats, incidents, intrusion, and policy. The individual selected for this position will have the ability to build strong relationships within the IT organization and with business stakeholders, while being able to secure CEC's core and restaurant-based technology infrastructure.

Responsibilities:

Under limited direction, responsible for activities related to enterprise cybersecurity:

• Primary responsibilities include introducing best practice procedures, standards, and policies towards the protection of CEC data, and lead any incident response related to data security.

• Address data protection requirements such as access/audit controls, anonymization / de-identification, encryption, retention, and residency, within product and corporate roadmaps.

• Monitor security events from the various channels(Office 365, Meraki, SentinelOne, Critical Start, Cisco, etc.), based on the security event severity, escalate to managed service support teams as appropriate to perform further investigation and resolution.

• Remediation of security related incidents and vulnerabilities (blocking nefarious email, removing malware, etc.).

• Implement and maintain network configurations, ensuring compliance with organizational standards and policies.

• Continuously monitor network performance and availability using Cisco network management tools and systems.

• Perform advanced troubleshooting of network issues, including routing, switching, and security configurations.

• Develop, execute, and track security controls to improve cyber resiliency.

• Identify and document security best practices.

• Maintains up-to-date knowledge of emerging technology trends and developments in areas of interest to the business.

• Adhere to all CEC Entertainment corporate guiding principles, processes, policies, standards, and procedures.

• Provide analysis and trending of security log data from many heterogeneous security devices.

• Provide Incident Response (IR) support when analysis confirms actionable incident.

• Monitor Office 365 for security related incidents and adjust policies as needed.

• Perform assessment as well as troubleshooting and help isolate issues with IDS/IPS sensors, antivirus servers, vulnerability scanners

• Supported internal and external audits (PCI, NIST CSF, SOX).

• Participate in the on-call rotation and 2nd tier support for escalations.

• Demonstrated ability to be a team player in a fast-paced environment

• Other duties as assigned by leadership.

Essential Qualifications:

• Bachelor's or Associate's Degree in Computer Science, Cybersecurity or equivalent work experience.

• One (1) to three (3) years of cybersecurity experience, with at least (1) of those years implementing data protection and privacy requirements.

• Strong understanding of network protocols, including TCP/IP, BGP, and VLANs.

• Experience with network security practices and tools.

• Experience with Intrusion Detection (deep TCP/IP knowledge, and Cybersecurity), various operating systems (Windows/UNIX), and web technologies (focusing on Internet security).

• Ability to read and understand packet level data Intrusion detection and prevention and Network Security Products (IDS/IPS, firewalls, etc.) Host Security Products (HIPS, AV, scanners, etc.)

• Knowledge of various security methodologies and processes, and technical security solutions (firewall and intrusion detection systems)

• Knowledge of data privacy regulations such as GDPR, CCPA etc.

• Knowledge with either NIST CSF, PCI, or SOX Compliance requirements.

• Knowledge of common Internet protocols and applications

• Ability to multi-task, prioritize, and manage time effectively with strong attention to detail.

• Proficient in Microsoft Office Applications

• Understanding of data security & privacy challenges in cloud environments such as AWS and Azure and expertise in developing and securing solutions in the cloud.

• Good communication, written, presentation and interpersonal skills.

• Proficient in Microsoft Office Applications

• Industry cybersecurity or technology certifications such as SSCP, CCSK, CEH or other related certifications are a bonus.