Wait, What Do You Do?

At Ball, integrity and trust are the foundation of who we are. Guided by our core values—"We Care. We Work. We Win.”—we create a culture where every voice matters and every idea drives progress. Further your career at Ball, a world leader in manufacturing sustainable aluminium packaging. Achieve extraordinary things when you join our team, and make a difference in your professional development, the community, and around the globe! Create a new future. Apply Today. Position overview: As a Cybersecurity Threat Intelligence Analyst you will be responsible for monitoring, analyzing, and reporting on cyber threat activity to support cyber defense operations, incident response, and risk prioritization. Working closely with cybersecurity and technology teams, this role develops actionable threat intelligence by identifying emerging threats, assessing adversary activity, and providing timely insights that strengthen the organization’s security posture. The position offers an opportunity to build advanced analytical capabilities while contributing to global cybersecurity operations. Key responsibilities include: <ul type="disc"> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Monitor threat intelligence sources to identify emerging threats, campaigns, vulnerabilities, and indicators relevant to the organization.</li> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Analyze threat data to identify patterns, trends, and potential impacts across enterprise environments.</li> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Support Cyber Defense Operations by providing intelligence context during security investigations and incident response activities.</li> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Assist in mapping threat activity to vulnerabilities, exposures, and existing security controls.</li> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Produce clear, accurate threat intelligence reports, summaries, and briefings for operational stakeholders.</li> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Maintain threat intelligence documentation, tracking records, and supporting artifacts to ensure consistency and auditability.</li> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Support intelligence collection activities by gathering, organizing, and evaluating data aligned with defined priorities.</li> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Contribute to cyber exercises and simulations through threat research and scenario development support.</li> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Escalate significant findings, emerging risks, or analytical concerns to senior team members in a timely manner.</li> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Monitor region-specific threat activity and support regional incident response efforts with relevant intelligence and research.</li> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Collaborate with key stakeholders across Cyber Defense Operations, Attack Surface Management, Cybersecurity GRC, OT Security, and Cybersecurity Architecture & Engineering teams.</li> </ul> What are we looking for? <ul type="disc"> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Bachelor’s degree in Information Security, Computer Science, Intelligence Studies, or a related field.</li> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Minimun 3 years of experience in cybersecurity, security operations, threat analysis, or a related analytical discipline.</li> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Exposure to threat intelligence, security monitoring, incident response, or cyber defense activities is preferred.</li> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Relevant cybersecurity certifications are considered an advantage.</li> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Strong analytical and problem-solving skills with a curiosity for investigating emerging threats and unfamiliar activity.</li> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Ability to synthesize information from multiple sources and communicate findings clearly to technical and non-technical audiences.</li> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Excellent written communication skills and attention to detail when producing reports and documentation.</li> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Ability to manage multiple priorities, work within structured analytical processes, and collaborate effectively with cross-functional teams.</li> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Foundational understanding of cyber threats, attack techniques, adversary behaviors, and the role of threat intelligence in cybersecurity operations.</li> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Fluent English language skills.</li> </ul> #LI-Hybrid #LI-MZ1 If you have a disability and/or long-term health condition that impacts on your ability to access any of the information outlined in the job application process, please do not hesitate in letting us know, so that we can endeavour to provide it you in the most accessible format. please email jobs.emea@ball.com with your access request and somebody will respond to you within 3 business days. Ball Corporation is an Equal Opportunity Employer. We actively encourage applications from everybody, regardless of gender, age, ethnicity, faith, ability, or orientation. Our products range from infinitely recyclable aluminium cans, cups to aerosol bottles solutions that enable our customers to contribute to a better world. Each of us has a deep commitment to diversity and inclusion which is the foundation of our culture of belonging. Everyone at Ball is making a difference by doing what we love. Because what we create may change, but what we will always make is a difference. Please note the advertised job title might vary from the job title on the contract due to local job title structure and global HR systems. No agencies please.

Threat Intel Analyst (Belgrade, RS, 11070)