Senior Security Analyst, Cyber Defense Operations

About the role

The Senior Security Analyst executes and coordinates advanced cybersecurity defense activities to detect, analyze and respond to cyber threats affecting Ball Corporation's global IT and OT-adjacent environments. Reporting to the Director of Cyber Defense Operations, the role is a senior technical practitioner and operational leader supporting threat detection, incident response, attack surface management and vulnerability management, working closely with internal cybersecurity teams and a Managed Security Service Provider (MSSP).

Key responsibilities

• Perform advanced security monitoring, investigation and incident response across enterprise environments.
• Act as a senior escalation point for cybersecurity incidents, supporting triage, containment, eradication and recovery.
• Support the Attack Surface Management program by analyzing exposure data, validating findings and coordinating remediation.
• Run vulnerability management activities, including analysis, risk-based prioritization and remediation tracking.
• Coordinate daily operations with the MSSP, including alert handling, investigations and escalations.
• Help develop, maintain and run incident response playbooks and procedures.
• Take part in cyber incident simulations, tabletop exercises and post-incident reviews, and document incidents, investigations and lessons learned.
• Contribute to cyber defense metrics, dashboards and operational reporting.
• Support monitoring and response across global regions and time zones, and coordinate with regional IT, OT and business teams.

Required profile

• Bachelor's degree in Information Security, Computer Science or a related technical discipline.
• Minimum of 6 years of experience in cybersecurity operations, security monitoring or incident response; enterprise or industrial environments preferred.
• Relevant cybersecurity certifications preferred.
• Fluent English.

Required skills

• Knowledge of cybersecurity threats, attack techniques and defensive controls.
• Understanding of incident response processes and escalation models.
• Familiarity with attack surface management and vulnerability management concepts.
• Awareness of OT-related cyber risks and safety considerations.
• Strong collaboration skills across cybersecurity, IT, OT and external service providers.