Job Description

At CEC Entertainment, we build careers around great food, family and fun! Our purpose and our passion is to create the best place for kids and families to eat and play!

CEC Entertainment is the global leader in family entertainment and operator of Chuck E. Cheese and Peter Piper restaurants. CEC Entertainment is rapidly adapting to the ever-evolving business environment. The Information Technology portfolio is built on vendor, SaaS, and cloud solutions. We are continuously investing in store solutions, online and mobile services, and core systems including HCM, Payroll, and Financials to improve business operations and drive value. Key partner platforms include NCR Aloha, OLO, Workday, Cisco, Fortinet, and Microsoft O365 and Azure. This creates opportunities for creative and motivated professionals to engage across the business to plan and deliver new and improved solutions.

We are seeking a Cybersecurity Analyst II to join our SOC team. This position is based at our Corporate Support Center in Irving, TX and reports to the Manager, Cybersecurity Operations. The Cybersecurity Analyst II plays an important role defining and building technical and business requirements for data protection to reduce cyber threats, monitoring, managing, and maintaining network security and performance, and developing plans around remediating active threats.

The individual will be responsible for the daily monitoring and remediation of cybersecurity threats, incidents, intrusion, and policy. The individual selected for this position will have the ability to build strong relationships within the IT organization and with business stakeholders, while being able to secure CEC’s core and restaurant-based technology infrastructure.

Responsibilities:

Under limited direction, responsible for activities related to enterprise cybersecurity:

• Primary responsibilities include introducing best practice procedures, standards, and policies towards the protection of CEC data, and lead any incident response related to data security.
• Address data protection requirements such as access/audit controls, anonymization / de-identification, encryption, retention, and residency, within product and corporate roadmaps.
• Monitor security events from the various channels (Office 365, Meraki, SentinelOne, Critical Start, Cisco, etc.), based on the security event severity, escalate to managed service support teams as appropriate to perform further investigation and resolution.
• Remediation of security related incidents and vulnerabilities (blocking nefarious email, removing malware, etc.).
• Implement and maintain network configurations, ensuring compliance with organizational standards and policies.
• Execute and monitor user provisioning and deprovisioning processes across enterprise systems to ensure timely and secure access lifecycle management.
• Maintain role-based access control (RBAC) models and enforce least privilege principles across applications and platforms.
• Conduct periodic access reviews to validate user entitlements and ensure compliance with internal policies and regulatory requirements.
• Investigate and remediate access anomalies, including unauthorized access attempts, privilege escalations, and orphaned accounts.
• Develop and deliver cybersecurity awareness training programs tailored to different user groups, emphasizing phishing prevention, password hygiene, and data protection.
• Track and report training completion metrics, identifying gaps and recommending targeted interventions.
• Develop, execute, and track security controls to improve cyber resiliency.
• Identify and document security best practices.
• Maintains up-to-date knowledge of emerging technology trends and developments in areas of interest to the business.
• Adhere to all CEC Entertainment corporate guiding principles, processes, policies, standards, and procedures.
• Provide analysis and trending of security log data from many heterogeneous security devices.
• Provide Incident Response (IR) support when analysis confirms actionable incident.
• Monitor Office 365 for security related incidents and adjust policies as needed.
• Supported internal and external audits (PCI, NIST CSF, SOX).
• Participate in the on-call rotation and 2nd tier support for escalations.
• Demonstrated ability to be a team player in a fast-paced environment
• Other duties as assigned by leadership.

Essential Qualifications:

• Bachelor’s or Associate’s Degree in Computer Science, Cybersecurity or equivalent work experience.
• 1+ years of cybersecurity experience, including at least 1 year in identity and access management (IAM), user lifecycle operations, or cybersecurity operations.
• Hands-on experience with IAM tools and platforms (e.g., Azure AD, Okta, SailPoint, Ping Identity).
• Strong understanding of access control models, including RBAC, ABAC, and least privilege principles.
• Experience conducting access reviews and entitlement audits in compliance with regulatory frameworks (e.g., SOX, PCI DSS).
• Familiarity with user provisioning/deprovisioning workflows, including integration with HRIS and ITSM systems.
• Knowledge of various security methodologies and processes, and technical security solutions (firewall and intrusion detection systems)
• Knowledge of data privacy regulations such as GDPR, CCPA etc.
• Knowledge with either NIST CSF, PCI, or SOX Compliance requirements.
• Knowledge of common Internet protocols and applications
• Ability to multi-task, prioritize, and manage time effectively with strong attention to detail.
• Proficient in Microsoft Office Applications
• Understanding of data security & privacy challenges in cloud environments such as AWS and Azure and expertise in developing and securing solutions in the cloud.
• Good communication, written, presentation and interpersonal skills.
• Proficient in Microsoft Office Applications
• Industry cybersecurity or technology certifications such as SSCP, CCSK, CEH or other related certifications are a bonus.

Job Tags

Similar Jobs