Wait, What Do You Do?

At Ball, integrity and trust are the foundation of who we are. Guided by our core values—"We Care. We Work. We Win.”—we create a culture where every voice matters and every idea drives progress. Further your career at Ball, a world leader in manufacturing sustainable aluminium packaging. Achieve extraordinary things when you join our team, and make a difference in your professional development, the community, and around the globe! Create a new future. Apply Today. Position overview: The Senior Security Analyst is responsible for executing and coordinating advanced cybersecurity defense activities to detect, analyze, and respond to cyber threats impacting Ball Corporation’s global IT and OT‑adjacent environments. The role is reporting to the Director of Cyber Defense Operations, and it serves as a senior technical practitioner and operational leader, supporting threat detection, incident response, attack surface management, and vulnerability management. The Senior Security Analyst works closely with internal cybersecurity teams and a Managed Security Service Provider (MSSP) to ensure timely threat response, risk‑based prioritization, and effective communication during cybersecurity events. Key responsiblities include: <div> <ul style="margin-top:0.0in;margin-bottom:0.0in" type="disc"> <li style="margin-top:0.0px;margin-bottom:0.0px;vertical-align:middle;font-family:arial, helvetica, sans-serif">Perform advanced security monitoring, investigation, and incident response activities across enterprise environments</li> <li style="margin-top:0.0px;margin-bottom:0.0px;vertical-align:middle;font-family:arial, helvetica, sans-serif">Act as a senior escalation point for cybersecurity incidents, supporting triage, containment, eradication, and recovery efforts</li> <li style="margin-top:0.0px;margin-bottom:0.0px;vertical-align:middle;font-family:arial, helvetica, sans-serif">Support the Attack Surface Management (ASM) program by analyzing exposure data, validating findings, and coordinating remediation actions</li> <li style="margin-top:0.0px;margin-bottom:0.0px;vertical-align:middle;font-family:arial, helvetica, sans-serif">Execute Vulnerability Management activities, including vulnerability analysis, risk‑based prioritization, and remediation tracking</li> <li style="margin-top:0.0px;margin-bottom:0.0px;vertical-align:middle;font-family:arial, helvetica, sans-serif">Coordinate day‑to‑day operational activities with the MSSP, including alert handling, investigations, and escalation management</li> <li style="margin-top:0.0px;margin-bottom:0.0px;vertical-align:middle;font-family:arial, helvetica, sans-serif">Support development, maintenance, and execution of incident response playbooks and procedures</li> <li style="margin-top:0.0px;margin-bottom:0.0px;vertical-align:middle;font-family:arial, helvetica, sans-serif">Participate in cyber incident simulations, tabletop exercises, and post‑incident reviews</li> <li style="margin-top:0.0px;margin-bottom:0.0px;vertical-align:middle;font-family:arial, helvetica, sans-serif">Document incidents, investigations, and lessons learned to improve detection and response maturity</li> <li style="margin-top:0.0px;margin-bottom:0.0px;vertical-align:middle;font-family:arial, helvetica, sans-serif">Provide technical input into cyber defense metrics, dashboards, and operational reporting</li> <li style="margin-top:0.0;margin-bottom:0.0;vertical-align:middle">Provide technical input into cyber defense metrics, dashboards, and operational reporting</li> <li style="margin-top:0.0;margin-bottom:0.0;vertical-align:middle;color:black">Support cybersecurity monitoring and response activities across global regions and time zones</li> <li style="margin-top:0.0;margin-bottom:0.0;vertical-align:middle;color:black">Coordinate with regional IT, OT, and business teams during incident response and remediation efforts</li> <li style="margin-top:0.0;margin-bottom:0.0;vertical-align:middle;color:black">Account for regional operational and regulatory considerations during investigations and response activities</li> <li style="margin-top:0.0;margin-bottom:0.0;vertical-align:middle;color:black">Ensure consistent execution of cyber defense processes while supporting regional operational needs</li> </ul> What are we looking for? <ul style="margin-top:0.0in;margin-bottom:0.0in" type="disc"> <li style="margin-top:0.0;margin-bottom:0.0;vertical-align:middle;color:black">Bachelor’s degree in Information Security, Computer Science, or a related technical discipline required</li> <li style="margin-top:0.0;margin-bottom:0.0;vertical-align:middle;color:black">Minimum of 6–10 years of experience in cybersecurity operations, security monitoring, or incident response roles</li> <li style="margin-top:0.0;margin-bottom:0.0;vertical-align:middle;color:black">Experience supporting enterprise or industrial environments preferred</li> <li style="margin-top:0.0;margin-bottom:0.0;vertical-align:middle;color:black">Relevant cybersecurity certifications preferred</li> <li style="margin-top:0.0;margin-bottom:0.0;vertical-align:middle;color:black">Strong collaboration skills across cybersecurity, IT, OT, and external service providers</li> <li style="margin-top:0.0;margin-bottom:0.0;vertical-align:middle;color:black">Knowledge of cybersecurity threats, attack techniques, and defensive controls</li> <li style="margin-top:0.0;margin-bottom:0.0;vertical-align:middle;color:black">Understanding of incident response processes and escalation models</li> <li style="margin-top:0.0;margin-bottom:0.0;vertical-align:middle;color:black">Familiarity with attack surface management and vulnerability management concepts</li> <li style="margin-top:0.0;margin-bottom:0.0;vertical-align:middle;color:black">Awareness of OT‑related cyber risks and safety considerations</li> <li style="margin-top:0.0;margin-bottom:0.0;vertical-align:middle;color:black">Understanding of how cyber defense activities support enterprise risk reduction, resilience, and regulatory posture</li> <li style="margin-top:0.0px;margin-bottom:0.0px;vertical-align:middle;color:black;font-size:10.0pt">Fluent English language </li> </ul> </div> Ball Corporation is an Equal Opportunity Employer. We actively encourage applications from everybody, regardless of gender, age, ethnicity, faith, ability, or orientation. Our products range from infinitely recyclable aluminium cans, cups to aerosol bottles solutions that enable our customers to contribute to a better world. Each of us has a deep commitment to diversity and inclusion which is the foundation of our culture of belonging. Everyone at Ball is making a difference by doing what we love. Because what we create may change, but what we will always make is a difference. Please note the advertised job title might vary from the job title on the contract due to local job title structure and global HR systems. No agencies please.

Senior Analyst, Cyber Defense Operations (Belgrade, RS, 11070)