Sr. Technical Analyst - Network Protection (São José dos Campos/SP)

Ball Corporation; São José dos Campos; Híbrido; BRL 120 000 - 200 000; Tempo integral

Resumo da oferta

Ball Corporation is seeking an experienced Network Security Engineer to administer and optimize enterprise security platforms, manage firewall policies, and support secure remote access for a global workforce. The role covers WAF/SASE, PKI, and OT security initiatives within a hybrid on-site environment in São José dos Campos, Brazil.

The candidate should have strong hands-on NGFW experience (Check Point/Palo Alto), cloud security knowledge (Azure/AWS), and excellent collaboration across global

Qualificações

• Bachelor's degree in IT, cybersecurity, CS, or engineering.
• Advanced or fluent English.
• Experience in enterprise network security environments.
• Hands-on with next‑gen firewalls, preferably Check Point and/or Palo Alto.
• Knowledge of cloud security principles (Azure/AWS).
• Experience with WAF, SIEM, PKI, or SASE solutions.

Responsabilidades

• Administer, maintain, and optimize enterprise network security platforms (Check Point, Palo Alto, Cisco ASA, VPN, SASE).
• Manage firewall policies and full rule lifecycle (implementation, review, optimization, compliance).
• Support secure remote access and global network connectivity.
• Implement and maintain web app and API protections (Azure WAF, F5 ASM).
• Support SIEM integrations, monitoring, and security investigations.
• Manage certificate lifecycle; support PKI services.
• Coordinate patching, config management, and compliance for network/security devices.
• Support OT security (industrial DMZs, secure remote access).
• Participate in design and continuous improvement of protection technologies and controls.
• Create and maintain technical docs and procedures.
• Participate in incident response, major incidents, and on‑call rotations.

Conhecimentos

Check Point

Palo Alto

Networking basics

WAF

SIEM

PKI

SASE

Cloud security

Incident response

VPN

DNS/VLANs

Formação académica

Bachelor's degree in IT / Cybersecurity / CS / Engineering

Ferramentas

Azure

AWS

SNOW/ServiceNow

Sentinel

Rapid7

Defender E.M.

Cisco ISE

Descrição da oferta de emprego

At Ball, integrity and trust are the foundation of who we are. Guided by our core values —"We Care. We Work. We Win."— we create a culture where every voice matters and every idea drives progress.

Together with our global employees, customers, and partners, we’re turning bold sustainability goals into reality and shaping a future we can all be proud of.

Main Responsibilities

• Administer, maintain, and optimize enterprise network security platforms, including Check Point, Palo Alto, Cisco ASA, VPN, and SASE technologies.
• Manage firewall policies and the complete rule lifecycle, including implementation, review, optimization, and compliance validation.
• Support secure remote access solutions and network connectivity services for global users and locations.
• Implement and maintain web application and API protection technologies, including Azure WAF and F5 ASM.
• Support SIEM integrations, security monitoring capabilities, and network security event investigations.
• Manage certificate lifecycle processes and support Public Key Infrastructure (PKI) services.
• Coordinate patching, configuration management, and compliance activities for network and security devices.
• Support OT security initiatives, including network segmentation, industrial DMZs, and secure remote access for manufacturing environments.
• Participate in the design, implementation, and continuous improvement of network protection technologies and security controls.
• Create and maintain technical documentation, standards, and operational procedures.
• Participate in incident response activities, major incident support, and on‑call rotations as required.

Main Requirements

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Engineering, or related field.
• Advanced or fluent English.
• Proven experience supporting enterprise network security environments.
• Strong hands‑on experience with next-generation firewalls, preferably Check Point and/or Palo Alto.
• Solid understanding of networking concepts, including TCP/IP, routing, switching, DNS, VPN, and network segmentation.
• Experience with security technologies such as WAF, SIEM, vulnerability management, PKI, or SASE solutions.
• Knowledge of cloud security principles and platforms such as Microsoft Azure and AWS.
• Experience with incident response, vulnerability remediation, and change management processes.
• Strong analytical and problem‑solving skills with the ability to troubleshoot complex technical issues.
• Ability to manage multiple priorities in a fast‑paced global environment.
• Strong communication, stakeholder management, and teamwork skills.
• Experience documenting processes, procedures, and technical standards.
• Experience with SNOW.

Preferred Qualifications

• Experience with Netskope, Cisco AnyConnect, Cisco ISE, Azure WAF, F5 ASM, Sentinel, Rapid7, BackBox, or Defender Exposure Management.
• Experience supporting manufacturing or OT security environments.
• Industry certifications such as CISSP, CISM, CCNA/CCNP Security, PCNSE, CCSA/CCSE, or Microsoft Security certifications.
• Experience with ITIL-based service management and continuous improvement practices.
• Experience with automation, scripting, APIs, or Infrastructure-as-Code.

Additional Information

• Location: São José dos Campos/SP - Brazil
• Hybrid On-Site Work Environment: This position requires regular in‑person engagement by working on‑site for three (3) days per work week (with core collaboration days of Tuesday, Wednesday and Thursday).

Ball Corporation is proud to be an Equal Opportunity Employer. We actively encourage applications from everybody. All qualified job applicants will receive consideration without regard to race, color, religion, creed, national origin, aboriginality, genetic information, ancestry, marital status, sex, sexual orientation, gender identity or expression, physical or mental disability, pregnancy, veteran status, age, political affiliation or any other non‑merit characteristic.

Please note the advertised job title might vary from the job title on the contract due to local job title structure and global HR systems.

Global Grade 11