Senior Technical Analyst - Cyber Security

Ball Aerospace; São Paulo; Presencial; BRL 80.000 - 150.000; Tempo integral

Resumo da oferta

Join a forward-thinking company as a Senior Technical Analyst in Cyber Security, where you will lead innovative solutions and mentor junior analysts. This role is pivotal in managing IT security operations, addressing complex security challenges, and ensuring compliance with regulatory standards. You will leverage your extensive knowledge of cybersecurity tools and practices to protect the organization and its assets. Be part of a diverse team that values inclusion and is committed to making a difference in the world through sustainable practices. If you are passionate about cybersecurity and ready to take your career to the next level, this opportunity is for you.

Serviços

Health Insurance

Retirement Plan

Professional Development

Flexible Work Hours

Employee Discounts

Qualificações

• 4+ years of experience in a cybersecurity operations environment.
• Advanced knowledge of IT Security tools and incident response.

Responsabilidades

• Manage and respond to security incidents effectively.
• Conduct security audits and recommend remediation actions.

Conhecimentos

Cybersecurity Leadership

Incident Response

Security Audits

Risk Assessment

Networking

Technical Documentation

Formação académica

Bachelor's Degree in Computer Science or related field

CISSP Certification

CISM Certification

CISA Certification

Ferramentas

Firewalls

SIEM Tools

Intrusion Detection Systems

Data Loss Prevention Tools

Cloud Security Solutions (AWS, Azure)

Descrição da oferta de emprego

Senior Technical Analyst - Cyber Security

Company: Ball Corporation

Location: SÃO Jose Dos Campos, São Paulo, BR, 12246-876

Date: Feb 20, 2025

Job Category: IT Administration

Req. ID: 41189

Further your career at Ball, a world leader in manufacturing sustainable aluminium packaging. Achieve extraordinary things when you join our team, and make a difference in your professional development, the community, and around the globe!

Please, submit your resume in English.

Ball Corporation is looking for a well-rounded team player with broad technical leadership skills to add to our Global IT Security operations department. This position requires extensive knowledge in three or more of the following IT Security tools: Firewalls, Web Content Filtering, Web Application and Malware Protection, Intrusion Prevention System, SSL Decryption, Email Security, Strong Authentication, Remote Access, End Point Protection, Advanced Threat Management, Vulnerability Scanning & Remediation, Identity Management, Data Loss Prevention, Data Encryption, Security Incident Management, Public Key Infrastructure, Web Application Firewall, IT Security Forensics, Password Vaulting, Risk assessment, and security vulnerability assessment.

This position works within the Global IT Security team to solve complex IT Security problems by taking a broad perspective to identify innovative technical solutions. The successful candidate will provide mentorship and guidance to junior level cyber security analysts. The position also participates in managing our vendors to achieve the desired results including quality and on-time delivery. Working knowledge and relevant certifications in the above security tools is preferred.

Essential Responsibilities

1. Security administration is a hands-on role that requires a high level of technical expertise including networking, operating systems, applications, cloud environments, and security.
2. Responsible for a broad range of security tasks, including the day-to-day security administration of network security devices, as well as the management of technologies, such as firewall, intrusion detection, intrusion prevention, data loss prevention, antivirus, anti-spam, antispyware, and security information and event management (SIEM) tools.
3. Monitor, analyze, and respond to security incidents and breaches swiftly and effectively, minimizing potential impact.
4. Lead incident response efforts, coordinate investigations, and ensure all incidents are properly documented and reported.
5. Serve as a subject matter expert on cybersecurity matters, both internally and externally.
6. Conduct regular security audits and assessments to identify weaknesses in networks, systems, and applications, and recommend remediation actions.
7. Create and maintain system and network diagrams as well as process documentation.
8. Provide support to ensure planning and deployment is accomplished in coordination with system owners, engineers, and stakeholders and are consistent with appropriate infrastructure and security engineering requirements.
9. Assess and prioritize cybersecurity risks and vulnerabilities across the organization's technology landscape.
10. Follow up on remediation of vulnerabilities.
11. Participate in design and implementation of new security controls.
12. Stay current with cybersecurity threats and trends, providing ongoing intelligence and insights to inform security decision-making.
13. Create and modify procedural documentation as needed.
14. Collaborate with cross-functional teams to ensure compliance with regulatory standards and frameworks, such as SOX, HIPAA, or NIST.
15. Develop and maintain incident response plans, disaster recovery plans, and business continuity strategies to ensure resilience in the face of cybersecurity threats.
16. Ensure that all information systems operate in accordance with set standards.
17. Participate in an on-call rotation with the department.
18. Establish and maintain effective working relationships within the department, the Strategic Business Unit, and the Company.

Main Requirements/Knowledge

1. Advanced Level of English.
2. Experience in a cyber-security operations environment including 4+ years of technical leadership.
3. CISSP, CISM, CISA certifications preferred; other security relevant certifications considered.
4. Knowledge of CISCO ASA solutions specifically remote access.
5. Technical “hands-on” proficiency with at least three security-related systems and applications.
6. Technical proficiency with security-related systems and applications, especially mainstream OS’s.
7. Experience in documenting and maintaining processes and procedures.
8. Knowledge of information security principles, including risk assessment, intrusion detection, and network access control.
9. Knowledge of network infrastructure, including routers, switches, firewalls, VPN, and associated network protocols and concepts.
10. Knowledge of SANS Twenty Critical Controls information security policies, procedures, guidelines, and methodologies desired.
11. A strong familiarity with cryptographic concepts and their practical application.
12. Experience in securing Cloud environments such as Azure, AWS, SAP, etc.
13. Knowledge and Understanding of the CI/CD Pipeline along with tools such as Jenkins and Bamboo.
14. Experience in driving technology solutions in large, complex organizations.
15. Proven focus in metrics-driven delivery: defining Service Level Agreements (SLAs), monitoring SLAs, and enhancing environment to meet SLAs.
16. Experience in driving process and technology re-engineering using industry practices.

Ball Corporation is proud to be an Equal Opportunity Employer. We actively encourage applications from everybody. All qualified job applicants will receive consideration without regard to race, color, religion, creed, national origin, aboriginality, genetic information, ancestry, marital status, sex, sexual orientation, gender identity or expression, physical or mental disability, pregnancy, veteran status, age, political affiliation or any other non-merit characteristic.

When you join Ball you belong to a team of over 16,000 members worldwide. Our products range from infinitely recyclable aluminium cans to aerosol bottles that enable our customers to contribute to a better world.

Each of us has a deep commitment to diversity and inclusion which is the foundation of our culture of belonging.

Everyone at Ball is making a difference by doing what we love. Because what we create may change, but what we will always make is a difference.

Please note the advertised job title might vary from the job title on the contract due to local job title structure and global HR systems.