IT Security Ops Specialist

CREATIVITY IS OUR SUPERPOWER. It’s our heritage and it’s also our future. Because we don’t just make toys. We create innovative products and experiences that inspire fans, entertain audiences and develop children through play. Mattel is at its best when every member of our team feels respected, included, and heard—when everyone can show up as themselves and do their best work every day. We value and share an infinite range of ideas and voices that evolve and broaden our perspectives with a reach that extends into all our brands, partners, and suppliers.

SOC Operations  

• Provide technical leadership and direct oversight of SOC Analysts, ensuring 24x7 coverage, timely response to incidents, and adherence to operational procedures  

• Lead daily SOC operations, including real-time monitoring, alert triage, incident analysis, and escalation  

• Serve as a key escalation point for complex or high-severity security incidents, ensuring rapid containment, eradication, and recovery  

• Handle confirmed threats received from MDR SOC and drive remediation efforts 

• Participate in after-hours rotations or on-call duties to support critical incident response as needed. 

Threat Hunting & Intelligence 

• Define monthly and quarterly threat hunting themes aligned to business risk and threat landscape 

• Develop hunt hypotheses using Recorded Future and internal telemetry  

• Lead proactive threat hunting using Recorded Future, SIEM, EDR, and NDR telemetry  

• Perform threat actor attribution and risk analysis based on intelligence and observed activity  

• Track hunt outcomes and convert findings into actionable detections and controls 

Detection Engineering & Continuous Improvement 

• Drive detection improvements across tools (SIEM, EDR, NDR, Identity platforms) 

• Reduce manual processes through automation, scripting, and SOAR integrations 

• Oversee the configuration, tuning, and maintenance of SOC tools including: 

• SIEM (Sumo Logic, CrowdStrike Falcon Next-Gen SIEM) 

• EDR 

• IDS/IPS 

• NDR solutions (e.g., ExtraHop) 

• Threat intelligence platforms 

• Lead development and enhancement of SOC playbooks, workflows, and SOPs 

Metrics, KPIs & Reporting 

• Define, track, and report key SOC performance metrics, including:  

• Mean Time to Detect (MTTD)  

• Mean Time to Contain (MTTC)  

• Threat Hunt Success Rate  

• Detection Rule Effectiveness  

• False Positive Reduction  

• Coverage of Critical Assets  

• Identify and report visibility gaps across the environment  

• Provide regular reporting on incident trends, threat activity, and SOC performance  

Collaboration & Incident Response 

• Investigate high-severity incidents escalated by MDR  

• Coordinate with infrastructure, network, identity, and application teams for investigation and remediation  

• Ensure alignment with security frameworks (MITRE ATT&CK, NIST, SOX, PCI) 

Skills and Qualifications 

Required: 

• 10+ years of experience in cybersecurity operations, including 5+ years in a SOC Tech Lead or senior SOC engineering role  

• Proven experience in incident response, including detection, investigation, containment, and remediation  

• Strong expertise in:  

• SIEM, SOAR, EDR  

• Network Detection & Response (NDR), including ExtraHop  

• IDS/IPS and firewall technologies  

• Hands-on experience with threat hunting and detection engineering  

• Strong understanding of MITRE ATT&CK, NIST 800-61, and incident response frameworks 

• Experience integrating threat intelligence (e.g., Recorded Future) into detection workflows  

• Strong knowledge of Windows, Linux, and network protocols  

• Ability to analyze large datasets and develop actionable security insights  

• Excellent leadership, communication, and cross-functional collaboration skills 

Preferred: 

• Bachelor’s degree in Cybersecurity, Information Technology, or related field  

• Certifications: GCIH, CISSP, CISM, CEH, or equivalent  

• Experience with:  

• CrowdStrike, SentinelOne, Microsoft Defender  

• Sumo Logic or other SIEM platforms  

• SOAR automation and API integrations  

• Scripting/automation (Python, PowerShell)  

• Experience building threat hunting programs and detection pipelines 

Don’t meet every single requirement? At Mattel, we are dedicated to an inclusive workplace and a culture of belonging. If you’re excited about this role but your past experience doesn’t align perfectly with every qualification in the job description, we still encourage you to apply. You may be just the right candidate for this or other roles.

How We Work:

We are a purpose driven company aiming to empower generations to explore the wonder of childhood and reach their full potential. We live up to our purpose employing the following behaviors:

• We collaborate: Being a part of Mattel means being part of one team with shared values and common goals. Every person counts and working closely together always brings better results. Partnership is our process and our collective capabilities is our superpower.
• We innovate: At Mattel we always aim to find new and better ways to create innovative products and experiences. No matter where you work in the organization, you can always make a difference and have real impact. We welcome new ideas and value new initiatives that challenge conventional thinking.
• We execute: We are a performance-driven company. We strive for excellence and are focused on pursuing best-in-class outcomes. We believe in accountability and ownership and know that our people are at their best when they are empowered to create and deliver results.

Our Approach to Flexible Work:

We embrace a flexible work model designed to empower a culture of growth, optimism, and wellbeing, where every employee can reach their full potential. Combining purposeful in-person collaboration with flexibility, our focus is to optimize performance and drive connection for moments that matter.

Who We Are:

Mattel is a leading global toy and family entertainment company and owner of one of the most iconic brand portfolios in the world. We engage consumers and fans through our franchise brands, including Barbie, Hot Wheels, Fisher-Price, American Girl, Thomas & Friends, UNO, Masters of the Universe, Matchbox, Monster High, MEGA and Polly Pocket, as well as other popular properties that we own or license in partnership with global entertainment companies. Our offerings include toys, content, consumer products, digital and live experiences. Our products are sold in collaboration with the world’s leading retail and ecommerce companies. Since its founding in 1945, Mattel is proud to be a trusted partner in empowering generations to explore the wonder of childhood and reach their full potential.

Mattel’s award-winning workplace culture has been recognized by Forbes, Fast Company, Newsweek, Great Place to Work, TIME, and more.

Visit us at https://jobs.mattel.com/ and www.instagram.com/MattelCareers.

Mattel is an Equal Opportunity Employer where we want you to bring your authentic self to work every day. We welcome all job seekers, and all applicants will receive consideration for employment.

Videos to watch:

The Culture at Mattel

Corporate Philanthropy