Senior Analyst, Cyber Defense Operations
Ballaerosol
| Company | Ballaerosol |
| Category | Operations & Admin |
| Location | CZ |
| Remote | — |
| Employment | Not stated |
| Level | Senior |
| Salary | Not stated by the employer |
| First seen | 2 Aug 2026 (the employer did not state a posting date) |
| Last verified | 10 Aug 2026 |
| Source | The employer's own careers page (company_site) |
Description
Senior Analyst, Cyber Defense Operations
Company:
Ball Corporation
Location:
Belgrade, RS, 11070
Date:
21 Jul 2026
Job Category:
IT Administration
Req ID:
50166
At Ball, integrity and trust are the foundation of who we are. Guided by our core values—"We Care. We Work. We Win.”—we create a culture where every voice matters and every idea drives progress.
Further your career at Ball, a world leader in manufacturing sustainable aluminium packaging. Achieve extraordinary things when you join our team, and make a difference in your professional development, the community, and around the globe!
Create a new future. Apply Today.
Position overview:
The Senior Security Analyst is responsible for executing and coordinating advanced cybersecurity defense activities to detect, analyze, and respond to cyber threats impacting Ball Corporation’s global IT and OT ‑ adjacent environments. The role is r eporting to the Director of Cyber Defense Operations, and it serves as a senior technical practitioner and operational leader, supporting threat detection, incident response, attack surface management, and vulnerability management. The Senior Security Analyst works closely with internal cybersecurity teams and a Managed Security Service Provider (MSSP) to ensure timely threat response, risk ‑ based prioritization, and effective communication during cybersecurity events.
Key responsiblities include:
• Perform advanced security monitoring, investigation, and incident response activities across enterprise environments
• Act as a senior escalation point for cybersecurity incidents, supporting triage, containment, eradication, and recovery efforts
• Support the Attack Surface Management (ASM) program by analyzing exposure data, validating findings, and coordinating remediation actions
• Execute Vulnerability Management activities, including vulnerability analysis, risk ‑ based prioritization, and remediation tracking
• Coordinate day ‑ to ‑ day operational activities with the MSSP, including alert handling, investigations, and escalation management
• Support development, maintenance, and execution of incident response playbooks and procedures
• Participate in cyber incident simulations, tabletop exercises, and post ‑ incident reviews
• Document incidents, investigations, and lessons learned to improve detection and response maturity
• Provide technical input into cyber defense metrics, dashboards, and operational reporting
• Provide technical input into cyber defense metrics, dashboards, and operational reporting
• Support cybersecurity monitoring and response activities across global regions and time zones
• Coordinate with regional IT, OT, and business teams during incident response and remediation efforts
• Account for regional operational and regulatory considerations during investigations and response activities
• Ensure consistent execution of cyber defense processes while supporting regional operational needs
What are we looking for?
• Bachelor’s degree in Information Security, Computer Science, or a related technical discipline required
• Minimum of 6–10 years of experience in cybersecurity operations, security monitoring, or incident response roles
• Experience supporting enterprise or industrial environments preferred
• Relevant cybersecurity certifications preferred
• Strong collaboration skills across cybersecurity, IT, OT, and external service providers
• Knowledge of cybersecurity threats, attack techniques, and defensive controls
• Understanding of incident response processes and escalation models
• Familiarity with attack surface management and vulnerability management concepts
• Awareness of OT ‑ related cyber risks and safety considerations
• Understanding of how cyber defense activities support enterprise risk reduction, resilience, and regulatory posture
• Fluent English language
Ball Corporation is an Equal Opportunity Employer. We actively encourage applications from everybody, regardless of gender, age, ethnicity, faith, ability, or orientation. Our products range from infinitely recyclable aluminium cans, cups to aerosol bottles solutions that enable our customers to contribute to a better world.
Each of us has a deep commitment to diversity and inclusion which is the foundation of our culture of belonging. Everyone at Ball is making a difference by doing what we love. Because what we create may change, but what we will always make is a difference.
Please note the advertised job title might vary from the job title on the contract due to local job title structure and global HR systems.
No agencies please.
Opens in a new tab.
Opens in a new tab.
Opens in a new tab.
Opens in a new tab.
© 2024 Ball Corporation
×
When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. Because we respect your right to privacy, you can choose not to allow some types of cookies. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer.
Required Cookies
These cookies are required to use this website and can't be turned off.
Required Cookies
Show More Details
Required Cookies
Provider
Description
Enabled
SAP as service provider
We use the following session cookies, which are all required to enable the website to function:
• "route" is used for session stickiness
• "careerSiteCompanyId" is used to send the request to the correct data centre
• "JSESSIONID" is placed on the visitor's device during the session so the server can identify the visitor
• "Load balancer cookie" (actual cookie name may vary) prevents a visitor from bouncing from one instance to another