Information Security Investigations Analyst

Headquartered in New York City, Take-Two Interactive Software, Inc. is a leading developer, publisher, and marketer of interactive entertainment for consumers around the globe. We develop and publish products principally through Rockstar Games, 2K, and Zynga. Our strategy is to create hit entertainment experiences, delivered on every platform relevant to our audience through a variety of sound business models. Our pillars - creativity, innovation, and efficiency - guide us as we strive to create the highest quality, most captivating experiences for our consumers. The Company’s common stock is publicly traded on NASDAQ under the symbol TTWO. For more corporate and product information please visit our website at http://www.take2games.com.

We are seeking a proactive and meticulous Investigations Analyst to join our Information Security team. In this pivotal role, you will conduct complex investigations into insider threats, game cheating, and other threat actor activities to keep our games and services secure. You will be responsible for identifying critical information gaps, maintaining refined threat profiles, and harnessing open-source intelligence. A key part of your mission will be to collect, preserve, and analyze digital evidence following industry best practices, while also creating automated monitors and detailed reports suitable for technical and executive audiences. You will build a culture of continuous improvement, helping to refine investigative playbooks and methodologies to adapt to emerging threats and attack techniques. This role is ideal for an established information security professional seeking to expand their horizons, who thrives on challenging investigative work, and can consistently enforce a high standard of precision and discipline in the defense against all threat actors.

• Conduct investigations of insider threats, game cheaters, and in-game harassment
• Provide investigative support to Legal, HR, IT and other Information Security teams
• Identify information sources and critical gaps
• Identify new opportunities for detection
• Maintain case files on potential threat actors
• Maintain and refine threat profiles and adapt to newly-identified threat model
• Create automated monitors, alerts, and dashboards in support of the investigations program
• Develop reports suitable for technical and executive audiences
• Propose and refine playbooks and standard operating procedures
• Stay current with emerging threats and attack techniques
• Refine manual investigation methodologies
• Automate repetitive investigation tasks
• Collect, preserve, and analyze digital evidence following industry best practices (NIST SP 800-61)
• Maintain chain of custody for all digital evidence
• Assist in responding to emergency situations like security incidents
• Provide investigative and record-keeping support to the DFIR team
• Identify and work to fill knowledge and skill gaps
• Maintain an Individual Development Plan with management
• Participate in tabletop exercises and simulations to enhance team readiness

• 3+ years of hands-on experience in information security operations, digital forensics, threat intelligence, or incident response
• Experience with digital forensics tools such as EnCase, The Sluethkit, Magnet Forensics, etc
• Strong background in intelligence gathering, monitoring and reporting
• Experience conducting various types of investigations
• Experience with data warehouses such as DataBricks or Redshift
• Experience with relational databases such as Postgres or MySQL
• Experience automating processes with languages such as Python or Go
• Strong written and verbal communication skills
• Ability to present technical findings to non-technical stakehold
• Industry-standard certifications related to Forensic Investigations and threat intelligence (GCFA, GCFE, GCIH, GOSI, GCTI, eCIR, eCDFP or PORP) are a plus
• Experience with Business Intelligence, Cyber Threat Intelligence and Link analysis platforms (Tableau, OpenCTI, MISP, Maltego) are a plus