F

FLSmidth

Mining and cement engineering, equipment, services

Cyber Security Analyst

Security Operations & Incident ResponseUpdated on Nov 2
Full-timeBucharest, RomaniaRON145k - RON190k /yr

About the Job

Requirements

  • A bachelor's degree in computer science, information technology, cybersecurity, or a related field is required.
  • Three to five years of hands-on expertise in IT operations and cybersecurity analysis is required.
  • A strong understanding of network protocols, Windows and Linux operating systems, and cloud environments such as Azure and OCI is required.
  • Experience with Microsoft Defender for Endpoint, SIEM platforms such as Microsoft Sentinel, Cisco Umbrella, Defender for Linux, BeyondTrust privilege management, and identity management is required.
  • Knowledge of endpoint security, security event analysis, log correlation, malware analysis, and indicator-of-compromise investigation is required.
  • Proven experience handling complex incidents and escalations is required.
  • Experience with ServiceNow or a similar IT service management platform is required.
  • The ability to work independently and take technical ownership is required.
  • The ability to perform under pressure in a high-availability enterprise environment is required.
  • Strong analytical and problem-solving skills are required.

Responsibilities

  • Provide Level 2 cybersecurity support by handling user escalations through ServiceNow, awareness campaigns, and phishing workflows, and by monitoring, troubleshooting, and resolving issues.
  • Own complex incidents and ensure timely resolution within agreed service-level agreements.
  • Perform in-depth diagnostics, root-cause analysis, and remediation actions.
  • Provide 24x5 security monitoring support and participate in weekend and on-call rotations.
  • Detect, triage, and respond to security incidents in a timely manner.
  • Conduct in-depth investigations of critical- and high-priority security incidents.
  • Lead critical incident response activities and coordinate stakeholder communications.
  • Work with infrastructure, network, cloud, and application teams to resolve issues.
  • Track remediation activities and ensure closure within agreed service-level agreements.
  • Monitor Microsoft Defender compliance across Windows servers, endpoints, and Linux servers; identify non-compliant assets and coordinate remediation.
  • Support endpoint security policy implementation and enforcement.
  • Analyze phishing alerts and suspicious emails, perform email header analysis, and identify threat indicators.
  • Recommend and implement appropriate containment and user-awareness actions using KnowBe4.
  • Investigate threats using Cisco Umbrella, including URL analysis, Smart Search investigations, blacklist management, and threat hunting.
  • Identify malicious domains, indicators of compromise, and emerging threats.
  • Manage vulnerability remediation activities using Tenable and related platforms.
  • Track CVEs, out-of-band patches, and third-party software vulnerabilities.
  • Coordinate patch deployment compliance with relevant teams and validate remediation effectiveness.
  • Support vulnerability risk assessments and reporting to each group.
  • Develop and maintain monthly security dashboards and compliance reports.
  • Drive incident resolution end to end, coordinating with Level 3 teams, vendors, and external providers.
  • Review, validate, and execute non-standard and complex operational changes in accordance with change-management processes.
  • Participate in major incident management, including technical bridge calls when required.
  • Perform problem-management activities, including identifying recurring issues and driving permanent fixes.
  • Provide remote support and troubleshoot endpoint security issues.
  • Maintain and improve operational documentation, runbooks, troubleshooting guides, and knowledge-base articles.
  • Contribute to service-improvement initiatives, automation opportunities, and operational efficiency.

Desired Qualifications

  • Relevant certifications such as CompTIA Security+, CCSP, CISSP, CEH, or GIAC certifications are a plus.

About the Company

FLSmidth

Mining and cement engineering, equipment, services

FLSmidth delivers engineering, equipment, and service solutions for the global mining and cement industries. Its products include heavy machinery, system designs, and ongoing maintenance and optimization services that help customers run mines and cement plants more efficiently. The company is moving toward a service-driven model, expanding its digital offerings and strengthening its manufacturing and supply chain to support faster, data-driven maintenance, spare-parts logistics, and plant optimization. It is differentiating itself through a focused portfolio strategy that includes separating its Mining and Cement divisions and divesting non-core assets, such as the Air Pollution Control business, while pursuing a pure-play approach in its core areas. The goal is to improve profitability by concentrating on core businesses, simplifying operations, and growing recurring service revenue and digital solutions across its global footprint.

Company size
10,001+
Company stage
IPO
Headquarters
Copenhagen, Denmark
Founded
1882

Recently Posted Jobs

Explore more opportunities at FLSmidth

See more jobs