Security Analyst

at  B Braun

REQUIREMENTS:

• Bachelor’s degree in Computer Science, Information Security, or a related field
• Relevant certifications (e.g., CISSP, CEH, CompTIA Security+, etc.) are highly desirable.
• Strong analytical skills and attention to detail
• Experience with security tools, such as SIEM, vulnerability scanners, and penetration testing
• Knowledge of industry standards (ISO 27001, NIST, CIS Controls, etc.).

JOB PURPOSE:

As a Security Analyst in our Cyber Defense Center, you´ll safeguard digital assets through threat detection, incident response & compliance

DUTIES AND RESPONSIBILITIES:

Security Monitoring
o Monitor security events and alerts using our SIEM (Security Information and Event Management) system.
o Investigate and analyze suspicious activities, anomalies, and potential threats.
o Collaborate with the incident response team to address security incidents promptly.
Threat Hunting / Purple Team
o Conduct proactive threat hunting exercises to identify potential vulnerabilities and attack vectors.
o Collaborate with the red team (offensive security) to simulate real-world attacks and assess our defenses.
o Provide actionable insights to improve our security controls based on purple team findings.
Security Incidents
o Respond to security incidents promptly and effectively.
o Coordinate incident handling, containment, eradication, and recovery efforts.
o Document incident details and lessons learned for continuous improvement.
Incident Response
o Develop and maintain incident response playbooks and procedures.
o Participate in tabletop exercises and real-time incident simulations.
o Work closely with other teams (network, IT-Security, system administrators, etc.) during incident resolution.
Penetration Testing
o Collaborate with external penetration testers or conduct internal penetration tests.
o Identify vulnerabilities in our systems, applications, and network infrastructure.
o Provide actionable recommendations to remediate identified weaknesses.
Vulnerability Management
o Regularly assess and prioritize vulnerabilities across our environment.
o Coordinate vulnerability scanning and patch management efforts.
o Ensure timely remediation of critical vulnerabilities.
KPI / Compliance Monitoring
o Define and track key performance indicators (KPIs) related to security operations.
o Monitor compliance with security policies, standards, and regulations.
o Generate reports and metrics for management and stakeholders.