Ball

Aluminum packaging for beverages and products

Senior Analyst - Cyber Defense Operations

Security Operations & Incident ResponseUpdated on Nov 14

Full-timeBelgrade, SerbiaNo salary listedIn-person

About the Job

Requirements

A bachelor's degree in Information Security, Computer Science, or a related technical discipline is required.
At least 6 years of experience in cybersecurity operations, security monitoring, or incident response roles.
Strong collaboration skills across cybersecurity, IT, OT, and external service providers.
Knowledge of cybersecurity threats, attack techniques, and defensive controls.
Understanding of incident response processes and escalation models.
Familiarity with attack surface management and vulnerability management concepts.
Awareness of OT-related cyber risks and safety considerations.
Understanding of how cyber defense activities support enterprise risk reduction, resilience, and regulatory posture.
Fluent English language.

Responsibilities

Perform advanced security monitoring, investigation, and incident response activities across enterprise environments.
Act as a senior escalation point for cybersecurity incidents, supporting triage, containment, eradication, and recovery efforts.
Support the Attack Surface Management program by analyzing exposure data, validating findings, and coordinating remediation actions.
Execute vulnerability management activities, including vulnerability analysis, risk-based prioritization, and remediation tracking.
Coordinate day-to-day operational activities with the Managed Security Service Provider, including alert handling, investigations, and escalation management.
Support the development, maintenance, and execution of incident response playbooks and procedures.
Participate in cyber incident simulations, tabletop exercises, and post-incident reviews.
Document incidents, investigations, and lessons learned to improve detection and response maturity.
Provide technical input into cyber defense metrics, dashboards, and operational reporting.
Support cybersecurity monitoring and response activities across global regions and time zones.
Coordinate with regional IT, OT, and business teams during incident response and remediation efforts.
Account for regional operational and regulatory considerations during investigations and response activities.
Ensure consistent execution of cyber defense processes while supporting regional operational needs.

Desired Qualifications

Experience supporting enterprise or industrial environments.
Relevant cybersecurity certifications.

At Ball, integrity and trust are the foundation of who we are. Guided by our core values—"We Care. We Work. We Win.”—we create a culture where every voice matters and every idea drives progress.
Further your career at Ball, a world leader in manufacturing sustainable aluminium packaging. Achieve extraordinary things when you join our team, and make a difference in your professional development, the community, and around the globe!
Create a new future. Apply Today.

Position overview:

The Senior Security Analyst is responsible for executing and coordinating advanced cybersecurity defense activities to detect, analyze, and respond to cyber threats impacting Ball Corporation’s global IT and OT‑adjacent environments. The role is reporting to the Director of Cyber Defense Operations, and it serves as a senior technical practitioner and operational leader, supporting threat detection, incident response, attack surface management, and vulnerability management. The Senior Security Analyst works closely with internal cybersecurity teams and a Managed Security Service Provider (MSSP) to ensure timely threat response, risk‑based prioritization, and effective communication during cybersecurity events.

Key responsiblities include:

Perform advanced security monitoring, investigation, and incident response activities across enterprise environments
Act as a senior escalation point for cybersecurity incidents, supporting triage, containment, eradication, and recovery efforts
Support the Attack Surface Management (ASM) program by analyzing exposure data, validating findings, and coordinating remediation actions
Execute Vulnerability Management activities, including vulnerability analysis, risk‑based prioritization, and remediation tracking
Coordinate day‑to‑day operational activities with the MSSP, including alert handling, investigations, and escalation management
Support development, maintenance, and execution of incident response playbooks and procedures
Participate in cyber incident simulations, tabletop exercises, and post‑incident reviews
Document incidents, investigations, and lessons learned to improve detection and response maturity
Provide technical input into cyber defense metrics, dashboards, and operational reporting
Provide technical input into cyber defense metrics, dashboards, and operational reporting
Support cybersecurity monitoring and response activities across global regions and time zones
Coordinate with regional IT, OT, and business teams during incident response and remediation efforts
Account for regional operational and regulatory considerations during investigations and response activities
Ensure consistent execution of cyber defense processes while supporting regional operational needs

What are we looking for?

Bachelor’s degree in Information Security, Computer Science, or a related technical discipline required
Minimum of 6 years of experience in cybersecurity operations, security monitoring, or incident response roles
Experience supporting enterprise or industrial environments preferred
Relevant cybersecurity certifications preferred
Strong collaboration skills across cybersecurity, IT, OT, and external service providers
Knowledge of cybersecurity threats, attack techniques, and defensive controls
Understanding of incident response processes and escalation models
Familiarity with attack surface management and vulnerability management concepts
Awareness of OT‑related cyber risks and safety considerations
Understanding of how cyber defense activities support enterprise risk reduction, resilience, and regulatory posture
Fluent English language

#LI-Hybrid

#LI-MZ1

Ball Corporation is an Equal Opportunity Employer. We actively encourage applications from everybody, regardless of gender, age, ethnicity, faith, ability, or orientation. Our products range from infinitely recyclable aluminium cans, cups to aerosol bottles solutions that enable our customers to contribute to a better world.
Each of us has a deep commitment to diversity and inclusion which is the foundation of our culture of belonging. Everyone at Ball is making a difference by doing what we love. Because what we create may change, but what we will always make is a difference.
Please note the advertised job title might vary from the job title on the contract due to local job title structure and global HR systems.

No agencies please.

About the Company

Ball

Aluminum packaging for beverages and products

Ball Corporation is a global aluminum packaging company focused on sustainability and packaging solutions for beverages, personal care, and household products. It produces cans, bottles, and aerosol containers and operates worldwide with about 16,000 employees (founded 1880). Its products are made from aluminum and designed for consumer use in beverages and personal care items. The company emphasizes sustainable packaging practices and responsible manufacturing as part of its operations. Ball aims to deliver reliable, recyclable packaging at scale while expanding its product lines and geographic reach to meet customer needs. Compared with competitors, Ball combines a long history, large manufacturing footprint, and a clear emphasis on sustainability and aluminum packaging to differentiate itself in the packaging industry.

Company size: 10,001+
Company stage: IPO
Headquarters: Westminster, CO
Founded: 1880

Recently Posted Jobs

Explore more opportunities at Ball

See more jobs