Sr. Technical Analyst - Cyber Security (São José dos Campos/SP)

Ball Corporation; São José dos Campos; Híbrido; BRL 180 000 - 240 000; Tempo integral

Resumo da oferta

Ball Corporation is seeking a Senior Technical Analyst Cyber Security in São José dos Campos to join our Global IT Security team. You will lead incident monitoring, detection, investigation, and response across networks, endpoints, applications, and cloud environments while mentoring junior analysts.

The role requires a strong foundation in SIEM, EDR, cloud security, vulnerability management, and threat intelligence, with excellent collaboration with infrastructure teams.

Qualificações

• Bachelor's degree in Information Technology, Computer Science, Cyber Security, or a related field, or equivalent experience.
• Extensive experience with cybersecurity monitoring and response technologies such as SIEM, endpoint detection and response, email security, identity security, cloud security, vulnerability management, or threat intelligence platforms.
• Strong knowledge of networking, operating systems, applications, cloud environments, and security architecture.
• Experience monitoring security events, investigating incidents, coordinating response activities, and driving remediation follow‑up.
• Knowledge of vulnerability assessment, risk assessment, and security control implementation.
• Ability to analyze complex security issues and develop innovative technical solutions.
• Experience working with security vendors and managing service delivery outcomes.
• Strong written communication skills with the ability to develop and maintain technical documentation.
• Capability to mentor and support junior team members in a collaborative environment.

Responsabilidades

• Monitor enterprise security alerts and threat activity across network, endpoint, application, and cloud environments.
• Lead and support security incident response activities, including alert validation, investigation, containment coordination, escalation, and post‑incident follow‑up.
• Assist with vulnerability management activities, including assessment, remediation tracking, and follow‑up actions.
• Identify opportunities to enhance detection logic, alert quality, incident response workflows, and operational playbooks.
• Create, update, and maintain cybersecurity procedures and technical documentation.
• Support effective intrusion detection and incident monitoring capabilities through analysis, tuning recommendations, and collaboration with infrastructure and security platform owners.
• Provide technical guidance and mentorship to junior cybersecurity analysts.
• Participate in the department on‑call rotation and support continuous security operations.

Conhecimentos

SIEM

EDR

Email security

Identity security

Cloud security

Vulnerability management

Threat intelligence

Incident response

Security monitoring

Networking basics

Formação académica

Bachelor's in IT/CS/Cyber Security

Descrição da oferta de emprego

At Ball, integrity and trust are the foundation of who we are. Guided by our core values—"We Care. We Work. We Win."—we create a culture where every voice matters and every idea drives progress.

Further your career at Ball, a world leader in manufacturing sustainable aluminium packaging. Achieve extraordinary things when you join our team, and make a difference in your professional development, the community, and around the globe!

Your Opportunity to Make an Impact

At Ball, the Senior Technical Analyst Cyber Security role is part of the Global IT Security team, helping protect critical systems, networks, applications, and cloud environments across the organization. This position provides technical leadership in cybersecurity operations with a primary focus on incident monitoring, threat detection, investigation, and response. This role helps ensure security technologies, alerts, and response processes are effectively used to identify and contain threats while supporting a secure and resilient global IT environment.

How You'll Make a Difference

• Monitor enterprise security alerts and threat activity across network, endpoint, application, and cloud environments.
• Use security platforms such as SIEM, endpoint detection and response, cloud security, email security, and related monitoring tools to detect, triage, and investigate suspicious activity.
• Lead and support security incident response activities, including alert validation, investigation, containment coordination, escalation, and post‑incident follow‑up.
• Assist with vulnerability management activities, including assessment, remediation tracking, and follow‑up actions.
• Identify opportunities to enhance detection logic, alert quality, incident response workflows, and operational playbooks.
• Create, update, and maintain cybersecurity procedures and technical documentation.
• Support effective intrusion detection and incident monitoring capabilities through analysis, tuning recommendations, and collaboration with infrastructure and security platform owners.
• Provide technical guidance and mentorship to junior cybersecurity analysts.
• Participate in the department on‑call rotation and support continuous security operations.

What Helps You Thrive In This Role

• Bachelor's degree in Information Technology, Computer Science, Cyber Security, or a related field, or equivalent experience.
• Extensive experience with cybersecurity monitoring and response technologies such as SIEM, endpoint detection and response, email security, identity security, cloud security, vulnerability management, or threat intelligence platforms.
• Strong technical knowledge of networking, operating systems, applications, cloud environments, and security architecture.
• Experience monitoring security events, investigating incidents, coordinating response activities, and driving remediation follow‑up.
• Knowledge of vulnerability assessment, risk assessment, and security control implementation.
• Ability to analyze complex security issues and develop innovative technical solutions.
• Experience working with security vendors and managing service delivery outcomes.
• Strong written communication skills with the ability to develop and maintain technical documentation.
• Capability to mentor and support junior team members in a collaborative environment.
• Relevant cybersecurity certifications and hands‑on experience with enterprise security platforms are preferred.

Additional Information

• Location: São José dos Campos/SP
• Hybrid On‑Site Work Environment: This position requires regular in‑person engagement by working on‑site for three (3) days per work week (with core collaboration days of Tuesday, Wednesday and Thursday) or remote from the location of the candidate. Remote work may also be considered, depending on the candidate’s distance from the Ball office.

Ball Corporation is an Equal Opportunity Employer. We actively encourage applications from everybody, regardless of gender, age, ethnicity, faith, ability, or orientation. Our products range from infinitely recyclable aluminium cans, cups to aerosol bottles solutions that enable our customers to contribute to a better world.

Each of us has a deep commitment to diversity and inclusion which is the foundation of our culture of belonging. Everyone at Ball is making a difference by doing what we love. Because what we create may change, but what we will always make is a difference.

Please note the advertised job title might vary from the job title on the contract due to local job title structure and global HR systems.

Job Grade: Global Grade 11