Security Analyst (Threat & Exposure Management)
About Our Client Our client is a global biopharmaceutical innovator dedicated to developing groundbreaking medicines that address high unmet medical needs. Driven by cutting-edge science and a commitment to patient impact, they foster a collaborative, tech-forward environment across their international operations. In this role, you will help safeguard critical infrastructure and research systems that protect vital health advancements worldwide.
The Opportunity Are you a proactive defender who loves connecting the dots behind adversary behavior? We are looking for an ambitious Security Analyst to join a high-impact Security & Compliance team. In this dynamic role, you will work side-by-side with Senior Security Analysts and global security leadership to hunt for hidden threats, analyze complex attack paths, participate in occasional red team/pentesting exercises, and drive exposure management across a modern enterprise infrastructure. If you thrive on threat telemetry, investigative analysis, and staying two steps ahead of real-world attackers, this is your chance to sharpen your skills at a global scale.
What You’ll Do Hunt & Investigate
Execute hypothesis-driven threat hunts across endpoint, identity, cloud, and network telemetry to uncover sophisticated adversary activity.
Respond to Incidents
Collaborate with senior leadership and cross-functional teams (SOC, Privacy, Legal, IT) during high-priority security events.
Exposure & Vulnerability Management
Leverage the Threat & Exposure Management framework to identify misconfigurations, analyze attack paths, prioritize vulnerabilities, and route them for remediation.
Map Adversary Tradecraft
Analyze attacker tactics and techniques using the MITRE ATT&CK framework and live threat intelligence.
Red Team Collaboration
Support occasional red team and penetration testing exercises to validate defenses and identify chained weaknesses.
Actionable Insights
Turn threat intelligence and hunt findings into concrete detection logic, response playbooks, and clear executive documentation.
What We’re Looking For Experience
3+ years in Threat Intelligence, Threat Hunting, or Incident Response within enterprise environments.
Technical Mastery
Hands-on experience with EDR platforms, SIEM/log analytics tools, and a solid understanding of vulnerability exploitation, exposure management, and attack path analysis.
Threat Knowledge
Deep understanding of modern intrusion techniques, attacker tradecraft, and telemetry correlation.
Mindset
Strong critical thinking under pressure, high autonomy, and effective communication skills to translate complex technical findings for non-technical stakeholders.
Education
Bachelor’s degree in Cybersecurity, Computer Science, or equivalent practical experience.
Nice-to-Haves / Certifications
GIAC: GCIA, GCIH, GCED, GCIR, GNFA, GCFA Offensive / Red Team: OSCP, OSCE, CRTO, CRTP, CRTA DFIR: CFCE, EnCE, or related specialized credentials