Sr. Technical Analyst - Cyber Security (São José dos Campos/SP)

Ball Aerospace; Brasil; Híbrido; BRL 180 000 - 240 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Hybrid on-site work arrangement

Resumo da oferta

Ball Corporation in Brazil is seeking a Senior Technical Analyst Cyber Security to join the Global IT Security team. You will lead incident monitoring, detection, investigation, and response to protect critical systems, networks, and cloud environments across the organization.

The role emphasizes collaboration with infrastructure and security platform owners, development of procedures, and mentorship of junior analysts.

Qualificações

• Bachelor's degree in Information Technology, Computer Science, Cyber Security, or related field or equivalent experience.
• Extensive experience with cybersecurity monitoring and response technologies such as SIEM, EDR, cloud security, email security, identity security, vulnerability management, or threat intelligence platforms.
• Strong technical knowledge of networking, operating systems, applications, cloud environments, and security architecture.
• Experience monitoring security events, investigating incidents, coordinating response activities, and driving remediation follow-up.
• Knowledge of vulnerability assessment, risk assessment, and security control implementation.
• Ability to analyze complex security issues and develop innovative technical solutions.
• Experience working with security vendors and managing service delivery outcomes.
• Strong written communication skills with the ability to develop and maintain technical documentation.
• Capability to mentor and support junior team members in a collaborative environment.
• Relevant cybersecurity certifications and hands-on experience with enterprise security platforms are preferred.

Responsabilidades

• Monitor enterprise security alerts and threat activity across network, endpoint, application, and cloud environments.
• Use security platforms to detect, triage, and investigate suspicious activity.
• Lead and support security incident response activities, including alert validation, investigation, containment coordination, escalation, and post-incident follow-up.
• Assist with vulnerability management activities, including assessment, remediation tracking, and follow-up actions.
• Identify opportunities to enhance detection logic, alert quality, incident response workflows, and operational playbooks.
• Create, update, and maintain cybersecurity procedures and technical documentation.
• Support effective intrusion detection and incident monitoring through analysis and tuning.
• Provide technical guidance and mentorship to junior cybersecurity analysts.
• Participate in on-call rotation and support continuous security operations.

Conhecimentos

Cybersecurity monitoring

Incident response

Threat detection

Mentoring junior analysts

Strong written communication

Problem solving

Formação académica

Bachelor's degree in IT/CS/C Cyber Security

Equivalent professional experience

Ferramentas

SIEM

EDR

Cloud security tools

Vulnerability management tools

Threat intelligence platforms

Descrição da oferta de emprego

Select how often (in days) to receive an alert:

Company: Ball Corporation

Location: SÃO Jose Dos Campos, SP, BR, 12246-876

Date: Sep 15, 2026

Job Category: IT Administration

Req. ID: 51021

At Ball, integrity and trust are the foundation of who we are. Guided by our core values—"We Care. We Work. We Win."—we create a culture where every voice matters and every idea drives progress.
Further your career at Ball, a world leader in manufacturing sustainable aluminium packaging. Achieve extraordinary things when you join our team, and make a difference in your professional development, the community, and around the globe!
Create a new future.

Your Opportunity to Make an Impact

At Ball, the Senior Technical Analyst Cyber Security role is part of the Global IT Security team, helping protect critical systems, networks, applications, and cloud environments across the organization. This position provides technical leadership in cybersecurity operations with a primary focus on incident monitoring, threat detection, investigation, and response. This role helps ensure security technologies, alerts, and response processes are effectively used to identify and contain threats while supporting a secure and resilient global IT environment.

How You'll Make a Difference

The responsibilities below represent more than daily tasks. They are opportunities to make a difference, collaborate with talented colleagues, and contribute to meaningful outcomes:

• Monitor enterprise security alerts and threat activity across network, endpoint, application, and cloud environments.
• Use security platforms such as SIEM, endpoint detection and response, cloud security, email security, and related monitoring tools to detect, triage, and investigate suspicious activity.
• Lead and support security incident response activities, including alert validation, investigation, containment coordination, escalation, and post-incident follow-up.
• Assist with vulnerability management activities, including assessment, remediation tracking, and follow-up actions.
• Identify opportunities to enhance detection logic, alert quality, incident response workflows, and operational playbooks.
• Create, update, and maintain cybersecurity procedures and technical documentation.
• Support effective intrusion detection and incident monitoring capabilities through analysis, tuning recommendations, and collaboration with infrastructure and security platform owners.
• Provide technical guidance and mentorship to junior cybersecurity analysts.
• Participate in the department on-call rotation and support continuous security operations.

What Helps You Thrive in This Role

We're looking for curious minds, collaborative spirits, and motivated professionals ready to make an impact. Here are the skills and experiences that will help you succeed in this role:

• Bachelor's degree in Information Technology, Computer Science, Cyber Security, or a related field, or equivalent experience.
• Extensive experience with cybersecurity monitoring and response technologies such as SIEM, endpoint detection and response, email security, identity security, cloud security, vulnerability management, or threat intelligence platforms.
• Strong technical knowledge of networking, operating systems, applications, cloud environments, and security architecture.
• Experience monitoring security events, investigating incidents, coordinating response activities, and driving remediation follow-up.
• Knowledge of vulnerability assessment, risk assessment, and security control implementation.
• Ability to analyze complex security issues and develop innovative technical solutions.
• Experience working with security vendors and managing service delivery outcomes.
• Strong written communication skills with the ability to develop and maintain technical documentation.
• Capability to mentor and support junior team members in a collaborative environment.
• Relevant cybersecurity certifications and hands‑on experience with enterprise security platforms are preferred.

Additional Information

• Hybrid On‑Site Work Environment: This position requires regular in‑person engagement by working on‑site for three (3) days per work week (with core collaboration days of Tuesday, Wednesday and Thursday) or remote from the location of the candidate. Remote work may also be considered, depending on the candidate’s distance from the Ball office.

Ball Corporation is an Equal Opportunity Employer. We actively encourage applications from everybody, regardless of gender, age, ethnicity, faith, ability, or orientation. Our products range from infinitely recyclable aluminium cans, cups to aerosol bottles solutions that enable our customers to contribute to a better world.
Each of us has a deep commitment to diversity and inclusion which is the foundation of our culture of belonging. Everyone at Ball is making a difference by doing what we love. Because what we create may change, but what we will always make is a difference.
Please note the advertised job title might vary from the job title on the contract due to local job title structure and global HR systems.