Security Analyst (Threat & Exposure Management)

About Our Client

Our client is a global biopharmaceutical innovator dedicated to developing groundbreaking medicines that address high unmet medical needs. Driven by cutting-edge science and a commitment to patient impact, they foster a collaborative, tech-forward environment across their international operations. In this role, you will help safeguard critical infrastructure and research systems that protect vital health advancements worldwide.

The Opportunity

Are you a proactive defender who loves connecting the dots behind adversary behavior? We are looking for an ambitious Security Analyst to join a high-impact Security & Compliance team.

In this dynamic role, you will work side-by-side with Senior Security Analysts and global security leadership to hunt for hidden threats, analyze complex attack paths, participate in occasional red team/pentesting exercises, and drive exposure management across a modern enterprise infrastructure. If you thrive on threat telemetry, investigative analysis, and staying two steps ahead of real-world attackers, this is your chance to sharpen your skills at a global scale.

What You’ll Do

• Hunt & Investigate: Execute hypothesis-driven threat hunts across endpoint, identity, cloud, and network telemetry to uncover sophisticated adversary activity.

• Respond to Incidents: Collaborate with senior leadership and cross-functional teams (SOC, Privacy, Legal, IT) during high-priority security events.

• Exposure & Vulnerability Management: Leverage the Threat & Exposure Management framework to identify misconfigurations, analyze attack paths, prioritize vulnerabilities, and route them for remediation.

• Map Adversary Tradecraft: Analyze attacker tactics and techniques using the MITRE ATT&CK framework and live threat intelligence.

• Red Team Collaboration: Support occasional red team and penetration testing exercises to validate defenses and identify chained weaknesses.

• Actionable Insights: Turn threat intelligence and hunt findings into concrete detection logic, response playbooks, and clear executive documentation.

What We’re Looking For

• Experience: 3+ years in Threat Intelligence, Threat Hunting, or Incident Response within enterprise environments.

• Technical Mastery: Hands-on experience with EDR platforms, SIEM/log analytics tools, and a solid understanding of vulnerability exploitation, exposure management, and attack path analysis.

• Threat Knowledge: Deep understanding of modern intrusion techniques, attacker tradecraft, and telemetry correlation.

• Mindset: Strong critical thinking under pressure, high autonomy, and effective communication skills to translate complex technical findings for non-technical stakeholders.

• Education: Bachelor’s degree in Cybersecurity, Computer Science, or equivalent practical experience.

Nice-to-Haves / Certifications:

• GIAC: GCIA, GCIH, GCED, GCIR, GNFA, GCFA

• Offensive / Red Team: OSCP, OSCE, CRTO, CRTP, CRTA

• DFIR: CFCE, EnCE, or related specialized credentials