Senior Analyst, Cyber Defense Operations

About the role

The Senior Analyst, Cyber Defense Operations leads advanced cybersecurity defense activities to detect, analyze, and respond to threats across Ball Corporation’s global IT and OT‑adjacent environments. Reporting to the Director of Cyber Defense Operations, the role serves as a senior technical practitioner and operational leader, working closely with internal teams and a Managed Security Service Provider (MSSP).

Key responsibilities

• Perform advanced security monitoring, investigation, and incident response across enterprise environments.
• Act as senior escalation point for cybersecurity incidents, supporting triage, containment, eradication, and recovery.
• Support the Attack Surface Management (ASM) program by analyzing exposure data, validating findings, and coordinating remediation actions.
• Execute vulnerability management activities, including analysis, risk‑based prioritization, and remediation tracking.
• Coordinate day‑to‑day operational activities with the MSSP, handling alerts, investigations, and escalations.
• Develop, maintain, and execute incident response playbooks and procedures.
• Participate in cyber incident simulations, tabletop exercises, and post‑incident reviews.
• Document incidents, investigations, and lessons learned to improve detection and response maturity.
• Provide technical input into cyber defense metrics, dashboards, and operational reporting.
• Support monitoring and response activities across global regions and time zones, coordinating with regional IT, OT, and business teams.
• Account for regional operational and regulatory considerations during investigations and response activities.

Required profile

• Bachelor’s degree in Information Security, Computer Science, or a related technical discipline.
• 6–10 years of experience in cybersecurity operations, security monitoring, or incident response roles.

Required skills

• Attack Surface Management
• Vulnerability Management
• Incident Response
• Security Monitoring
• Cyber Defense Metrics
• Dashboard Development
• Managed Security Service Provider coordination
• Operational Technology (OT) environment knowledge