Cyber Security Analyst

Graphic Packaging International; Barcelona; Presencial; EUR 45.000 - 65.000; Jornada completa

Descripción de la vacante

Graphic Packaging International is seeking a Cyber Security Analyst to monitor, detect, investigate, and respond to cybersecurity threats within our Barcelona area IT and manufacturing environments. You will be part of the SOC team protecting enterprise systems, networks, applications and data through continuous monitoring, threat analysis and proactive security operations.

Key responsibilities include security monitoring of SIEM/EDR, triage of events, investigation of IOCs, incident containment

Formación

• 2+ years in a Security Operations Center (SOC) or similar.
• Experience with SIEM platforms and incident response.
• Knowledge of network protocols, endpoints, and cloud security.

Responsabilidades

• Monitor security alerts and events from SIEM/EDR, firewalls and cloud security tools.
• Triage and analyze security events to determine legitimacy and severity.
• Investigate suspicious activities, IOCs, and potential malicious behavior.
• Correlate events to identify attack patterns and emerging threats.
• Escalate incidents and participate in incident response activities.
• Document findings and maintain incident records.
• Support containment, eradication, and recovery efforts.

Conocimientos

SOC experience

Cybersecurity principles

Analytical thinking

Incident response

Fast-paced environment

Educación

Bachelor's degree (Cyber Security / IT)

Herramientas

Microsoft Sentinel

Splunk

QRadar

ArcSight

Descripción del empleo

Descripción del trabajo

Job Purpose

The Cyber Security Analyst is responsible for monitoring, detecting, investigating, and responding to cybersecurity threats and security incidents within the organization's environment. As a member of the SOC team, this role focuses on protecting enterprise systems, networks, applications, and data through continuous monitoring, threat analysis, incident response, and proactive security operations. The successful candidate will work closely with security engineers, threat intelligence teams, IT operations, and business stakeholders to identify and mitigate cyber risks while maintaining a strong security posture.

Key Responsibilities

• Security Monitoring & Detection Monitor security alerts and events from SIEM, EDR/XDR, firewalls, IDS/IPS, cloud security platforms, email security gateways, and other security tools.
• Perform triage and analysis of security events to determine legitimacy, impact, and severity.
• Investigate suspicious activities, indicators of compromise (IOCs), and potential malicious behavior.
• Correlate security events across multiple technologies to identify attack patterns and emerging threats.
• Escalate incidents based on established procedures and severity classifications.
• Incident Response Participate in cybersecurity incident response activities.
• Investigate phishing attacks, malware infections, unauthorized access attempts, credential compromise, data exfiltration, and insider threats.
• Collect, preserve, and analyze security evidence.
• Document findings and maintain detailed incident records.
• Support incident containment, eradication, recovery, and post-incident reviews.

Knowledge, Skills and Experience

Essential

• Bachelor's degree in Cyber Security, Computer Science, Information Technology, or related field, or equivalent practical experience.
• 2+ years of experience in a Security Operations Center (SOC), cyber defense, security monitoring, or incident response role.
• Strong understanding of cybersecurity principles, attack methodologies, and threat actor tactics.
• Experience using SIEM platforms such as Microsoft Sentinel, Splunk, QRadar, ArcSight, or similar.
• Experience investigating security incidents across Windows, Linux, cloud and network environments.
• Knowledge of network protocols including TCP/IP, DNS, SMTP, and VPN technologies.
• Familiarity with endpoint security and EDR/XDR solutions.
• Strong analytical and problem‑solving skills.
• Ability to work in a fast-paced operational environment.

Desirable

• CompTIA Security+ Certified
• Information Systems Security Professional (CISSP)
• Certified Ethical Hacker (CEH)
• Certified Information Security Manager (CISM)
• GIAC Certifications
• Microsoft Security Certifications (SC-200, SC-300, SC-100)
• Global Industrial Cyber Security Professional (GICSP)

Key Competencies

• Risk awareness and commercial judgement
• Analytical thinking
• Attention to detail
• Effective decision-making
• Collaboration and teamwork
• Stakeholder management
• Continuous improvement mindset
• Ability to remain calm under pressure
• Strong organisational skills
• Commitment to safety, quality, and operational excellence

Success Measures

• Alert triage performance.
• Incident response effectiveness.
• Reduction of false positives.
• Documentation & knowledge management.
• Effective protection of manufacturing and business-critical systems.
• xbhjioe Improvement in overall cyber security maturity across IT and OT environments.