Cyber Security Analyst L2/L3 (Incident Response) at Merck Serono SA

Bratislava, Region of Bratislava, Slovakia -

Full Time

Start Date

Immediate

Expiry Date

10 Jan, 26

Salary

2000.0

Posted On

12 Oct, 25

Experience

2 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Cybersecurity, Incident Response, SOAR, SIEM, EDR, Windows, Linux, Analytical Skills, Threat Detection, Vulnerability Analysis, Communication Skills, Case Management, Network Security, TCP/IP, Incident Handling, Threat Intelligence

Industry

Pharmaceutical Manufacturing

Description

Work Your Magic with us! Ready to explore, break barriers, and discover more? We know you’ve got big plans – so do we! Our colleagues across the globe love innovating with science and technology to enrich people’s lives with our solutions in Healthcare, Life Science, and Electronics. Together, we dream big and are passionate about caring for our rich mix of people, customers, patients, and planet. That's why we are always looking for curious minds that see themselves imagining the unimaginable with us. Your Role: Be part of a dynamic, talent-oriented, and engaging Corporate Cybersecurity team! In this role, you will be triaging, analysing, and remediating security incidents, while maintaining technical documentation and delivering detailed investigation and analysis reports. You'll be on the front lines of cybersecurity, constantly monitoring security events and alerts that come in from various sources. When an issue is identified, you'll quickly execute predefined incident response playbooks to contain and address the situation. To truly understand what's happening, you'll collect, correlate, and analyze additional data, allowing for thorough incident analysis and an effective response. You'll also play a key part in supporting incident reporting to both internal teams and external stakeholders, ensuring everyone is informed. Finally, you'll collaborate with senior analysts, improving playbooks in both IT and OT, contributing to the ongoing effort to improve and strengthen security processes. Who you are previous experience in a SOC, incident response or cybersecurity in general experience with SOAR, SIEM, and EDR solutions knowledge of Windows and Linux operating systems strong analytical skills in threat, vulnerability, and intrusion detection analysis understanding of threat vectors as well as attacker techniques and tactics being a highly motivated individual with the ability to self-start, prioritize, and multi-task being able to react quickly, decisively, and deliberately in high stress situations strong verbal/written communication and interpersonal skills nice to have - one or more widely recognized security certifications from renowned institutions such as GIAC/SANS, EC-Council, etc. Service-related expert knowledge knowledge of incident handling, protection of systems, networks, applications and data confident handling of artifacts, IoCs and threat intelligence case management experience and tools experience with EDR and SIEM tools alert triage and investigation, applying knowledge of the environment, understanding of the attack chain, and initial impressions of alerts to prioritize, validate, and investigate alerts case management classification and initial validation, documenting relevant details and observables Cyber security and technical knowledge experience with operating system security (Linux and Windows), anti-virus technologies and network security working knowledge of common TCP/IP based services and protocols such as DNS, DHCP, HTTP, FTP, SSH, SMTP, etc. knowledge about firewalls, proxies/reverse proxies, IDS/IPS knowledge of operating systems ability to read and understand network and endpoint logs knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, cross-site scripting, etc.) consideration of laws, regulations, policies, and ethics (GDPR, etc.) skills in writing queries for security and investigative tools skills in applying incident handling best practices Salary starts at 2.000 EUR and is dependent upon experience. What we offer: We are curious minds that come from a broad range of backgrounds, perspectives, and life experiences. We believe that this variety drives excellence and innovation, strengthening our ability to lead in science and technology. We are committed to creating access and opportunities for all to develop and grow at your own pace. Join us in building a culture of inclusion and belonging that impacts millions and empowers everyone to work their magic and champion human progress! Apply now and become a part of a team that is dedicated to Sparking Discovery and Elevating Humanity!

Responsibilities

You will triage, analyze, and remediate security incidents while maintaining technical documentation and delivering detailed investigation reports. You'll monitor security events and alerts, executing incident response playbooks and collaborating with senior analysts to improve security processes.