Cyber Security Analyst

Graphic Packaging International; Cataluña; Presencial; EUR 42.000 - 62.000; Jornada completa

Descripción de la vacante

Graphic Packaging International is seeking a Cyber Security Analyst to monitor, detect, and respond to threats within the organization's environment. You will join the SOC team focusing on protecting enterprise systems, networks, and data through threat analysis and incident response.

Responsibilities include monitoring alerts from SIEM/EDR, triage of incidents, documentation, and collaboration with security engineers and IT operations to mitigate cyber risks and maintain a strong security

Formación

• Bachelor's degree or equivalent practical experience in a relevant field.
• 2+ years in a SOC, cyber defense, security monitoring, or incident response.
• Strong understanding of cybersecurity principles, attack methods, and threat actor tactics.
• Experience using SIEM platforms (e.g., Microsoft Sentinel, Splunk, QRadar, ArcSight).
• Experience investigating incidents across Windows, Linux, cloud, and network environments.
• Knowledge of TCP/IP, DNS, HTTP/S, SMTP, and VPN technologies.
• Familiarity with EDR/XDR solutions and endpoint security.
• Analytical, detail-oriented, and capable of working in a fast-paced environment.

Responsabilidades

• Monitor security alerts and events from SIEM, EDR/XDR, firewalls, IDS/IPS, and cloud security tools.
• Triage and analyze security events to assess legitimacy, impact, and severity.
• Investigate suspicious activity, IOCs, and potential malicious behavior.
• Correlate events across technologies to identify attack patterns and threats.
• Escalate incidents per procedures and severity classifications.
• Participate in incident response activities and containment efforts.
• Investigate phishing, malware, unauthorized access, data exfiltration, and insider threats.
• Collect, preserve, and analyze security evidence; document findings and maintain records.

Conocimientos

SOC experience

Threat analysis

Incident response

SIEM tools

Windows/Linux/Cloud

EDR/XDR

Network protocols

Analytical thinking

Educación

Bachelor's degree in Cyber Security, Computer Science, Information Technology, or related field

Herramientas

SIEM (Microsoft Sentinel, Splunk, QRadar, ArcSight)

EDR/XDR

Cloud security platforms

Descripción del empleo

Job Purpose

The Cyber Security Analyst is responsible for monitoring, detecting, investigating, and responding to cybersecurity threats and security incidents within the organization's environment. As a member of the SOC team, this role focuses on protecting enterprise systems, networks, applications, and data through continuous monitoring, threat analysis, incident response, and proactive security operations.

The successful candidate will work closely with security engineers, threat intelligence teams, IT operations, and business stakeholders to identify and mitigate cyber risks while maintaining a strong security posture.

Key Responsibilities

Security Monitoring & Detection

• Monitor security alerts and events from SIEM, EDR/XDR, firewalls, IDS/IPS, cloud security platforms, email security gateways, and other security tools.


• Perform triage and analysis of security events to determine legitimacy, impact, and severity.


• Investigate suspicious activities, indicators of compromise (IOCs), and potential malicious behavior.


• Correlate security events across multiple technologies to identify attack patterns and emerging threats.


• Escalate incidents based on established procedures and severity classifications.

Incident Response

• Participate in cybersecurity incident response activities.


• Investigate phishing attacks, malware infections, unauthorized access attempts, credential compromise, data exfiltration, and insider threats.


• Collect, preserve, and analyze security evidence.


• Document findings and maintain detailed incident records.


• Support incident containment, eradication, recovery, and post-incident reviews.

Knowledge, Skills and Experience

Essential

• Bachelor's degree in Cyber Security, Computer Science, Information Technology, or related field, or equivalent practical experience.


• 2+ years of experience in a Security Operations Center (SOC), cyber defense, security monitoring, or incident response role.


• Strong understanding of cybersecurity principles, attack methodologies, and threat actor tactics.


• Experience using SIEM platforms such as Microsoft Sentinel, Splunk, QRadar, ArcSight, or similar.


• Experience investigating security incidents across Windows, Linux, cloud, and network environments.


• Knowledge of network protocols including TCP/IP, DNS, HTTP/S, SMTP, and VPN technologies.


• Familiarity with endpoint security and EDR/XDR solutions.


• Strong analytical and problem-solving skills.


• Ability to work in a fast-paced operational environment.

Desirable

• CompTIA Security+


• Certified Information Systems Security Professional (CISSP)


• Certified Ethical Hacker (CEH)


• Certified Information Security Manager (CISM)


• GIAC Certifications


• Microsoft Security Certifications (SC-200, SC-300, SC-100)


• Global Industrial Cyber Security Professional (GICSP)

Key Competencies

• Risk awareness and commercial judgement


• Analytical thinking


• Attention to detail


• Effective decision-making


• Collaboration and teamwork


• Stakeholder management


• Continuous improvement mindset


• Ability to remain calm under pressure


• Strong organisational skills


• Commitment to safety, quality, and operational excellence

Success Measures

• Alert triage performance.


• Incident response effectiveness.


• Reduction of false positives.


• Documentation & knowledge management.


• Effective protection of manufacturing and business-critical systems.


• Improvement in overall cyber security maturity across IT and OT environments.