Senior Technical Analyst

Ball Corporation is seeking a well-rounded Senior Technical Analyst - Cyber Security to join the Global IT Security operations department. This position requires extensive knowledge in three or more of the following IT Security tools: Firewalls and firewall management systems, Web Content Filtering (URL Filtering), Web Application and Malware Protection, Intrusion Prevention System (IPS), SSL Decryption, Email Security, Strong Authentication, Remote Access, End Point Protection, Advanced Threat Management (APT), Vulnerability Scanning & Remediation, Identity Management, Data Loss Prevention, Data Encryption, Global DNS, Security Incident Management (SIM), Public Key Infrastructure, Web Application Firewall / Proxy, IT Security Forensics, Password Vaulting, Risk assessment, security vulnerability assessment. The successful candidate will provide mentorship to junior cyber security analysts and participate in managing our vendors to achieve the desired results including quality and on-time delivery. Working knowledge and relevant certifications in the listed tools are preferred.

• Security administration is a hands-on role that requires a high level of technical expertise including networking, operating systems, applications, cloud environments and security.
• Responsible for a broad range of security tasks, including the day-to-day security administration of network security devices, as well as the management of technologies, such as firewall, intrusion detection, intrusion prevention, data loss prevention, antivirus, anti-spam, antispyware, and security information and event management (SIEM) tools.
• Monitor, analyze, and respond to security incidents and breaches swiftly and effectively, minimizing potential impact.
• Lead incident response efforts, coordinate investigations, and ensure all incidents are properly documented and reported.
• Serve as a subject matter expert on cybersecurity matters, both internally and externally
• Conduct regular security audits and assessments to identify weaknesses in networks, systems, and applications, and recommend remediation actions
• Create and maintain system and network diagrams as well as process documentation
• Collaborate with system owners, engineers and stakeholders to ensure planning and deployment is accomplished in coordination with infrastructure and security engineering requirements
• Assess and prioritize cybersecurity risks and vulnerabilities across the organization's technology landscape; follow up on remediation of vulnerabilities.
• Participate in design and implementation of new security controls; stay current with cybersecurity threats and trends, providing ongoing intelligence to inform security decision-making.
• Develop and maintain incident response plans, disaster recovery plans, and business continuity strategies to ensure resilience.
• Ensure that all information systems operate in accordance with set standards; participate in an on-call rotation.
• Establish and maintain effective working relationships within the department, Cross-functional teams and company-wide, fostering a positive and productive work environment.

• Completed Bachelor's Degree.
• Advanced level of English.
• Experience in a cyber-security operations environment including 4+ years of technical leadership.
• CISSP, CISM, CISA certifications preferred; other security relevant certifications considered (e.g. SANS GIAC-GSEC, GCED, GCFW, GCIA, GCIH, GISP, GSLC).
• Knowledge of Cisco ASA remote access solutions.
• Hands-on proficiency with at least three security-related systems and applications (Vulnerability software, next generation firewalls, IDS/IPS, SIEM, Data Loss Prevention).
• Technical proficiency with security-related systems and applications, especially mainstream OS's (Windows and Linux), Vulnerability Scanners, SIEM, and anti-malware tools, user provisioning systems and intrusion detection, automated policy compliance, and desktop security tools.
• Experience in documenting and maintaining processes and procedures.
• Knowledge of information security principles, including risk assessment, intrusion detection, network access control (NAC), encryption, threat and vulnerability management.
• Knowledge of network infrastructure, including routers, switches, firewalls, VPN, and associated network protocols; CCNA preferred.
• Knowledge of SANS Twenty Critical Controls information security policies, procedures, guidelines, and methodologies.
• A strong familiarity with cryptographic concepts and their practical application.
• Experience in securing Cloud environments such as Azure, AWS, SAP, etc.
• Knowledge and Understanding of the CI/CD Pipeline along with tools such as Jenkins and Bamboo
• Experience in driving technology solutions in large, complex organizations.
• Proven focus in metrics-driven delivery: defining Service Level Agreements (SLAs), monitoring SLAs, enhancing environment to meet SLAs.
• Experience in driving process and technology re-engineering using industry practices e.g., COBIT, ITIL, CMMi.

Ball Corporation is proud to be an Equal Opportunity Employer. We actively encourage applications from everybody. All qualified job applicants will receive consideration without regard to race, color, religion, creed, national origin, ancestry, marital status, sex, sexual orientation, gender identity or expression, physical or mental disability, pregnancy, veteran status, age, political affiliation or any other non-merit characteristic.

No agencies please.

• Seniority level: Associate
• Employment type: Full-time
• Job function: Information Technology
• Industries: Packaging and Containers Manufacturing