Security Analyst (Threat & Exposure Management)

Our client is a global biopharmaceutical innovator dedicated to developing groundbreaking medicines that address high unmet medical needs. Driven by cutting-edge science and a commitment to patient impact they foster a collaborative tech-forward environment across their international this role you will help safeguard critical infrastructure and research systems that protect vital health advancements worldwide.

Are you a proactive defender who loves connecting the dots behind adversary behavior We are looking for an ambitious Security Analyst to join a high-impact Security & Compliance team.

In this dynamic role you will work side-by-side with Senior Security Analysts and global security leadership to hunt for hidden threats analyze complex attack paths participate in occasional red team/pentesting exercises and drive exposure management across a modern enterprise infrastructure. If you thrive on threat telemetry investigative analysis and staying two steps ahead of real-world attackers this is your chance to sharpen your skills at a global scale.

• Hunt & Investigate: Execute hypothesis-driven threat hunts across endpoint identity cloud and network telemetry to uncover sophisticated adversary activity.

• Respond to Incidents: Collaborate with senior leadership and cross-functional teams (SOC Privacy Legal IT) during high-priority security events.

• Exposure & Vulnerability Management: Leverage the Threat & Exposure Management framework to identify misconfigurations analyze attack paths prioritize vulnerabilities and route them for remediation.

• Map Adversary Tradecraft: Analyze attacker tactics and techniques using the MITRE ATT&CK framework and live threat intelligence.

• Red Team Collaboration: Support occasional red team and penetration testing exercises to validate defenses and identify chained weaknesses.

• Actionable Insights: Turn threat intelligence and hunt findings into concrete detection logic response playbooks and clear executive documentation.

• Experience: 3 years in Threat Intelligence Threat Hunting or Incident Response within enterprise environments.

• Technical Mastery: Hands-on experience with EDR platforms SIEM/log analytics tools and a solid understanding of vulnerability exploitation exposure management and attack path analysis.

• Threat Knowledge: Deep understanding of modern intrusion techniques attacker tradecraft and telemetry correlation.

• Mindset: Strong critical thinking under pressure high autonomy and effective communication skills to translate complex technical findings for non-technical stakeholders.

• Education: Bachelors degree in Cybersecurity Computer Science or equivalent practical experience.

• GIAC: GCIA GCIH GCED GCIR GNFA GCFA

• Offensive / Red Team: OSCP OSCE CRTO CRTP CRTA

• DFIR: CFCE EnCE or related specialized credentials