Security Analyst (Threat & Exposure Management)

About Our Client Our client is a global biopharmaceutical innovator dedicated to developing groundbreaking medicines that address high unmet medical needs. Driven by cutting-edge science and a commitment to patient impact, they foster a collaborative, tech-forward environment across their international operations. In this role, you will help safeguard critical infrastructure and research systems that protect vital health advancements worldwide. The Opportunity Are you a proactive defender who loves connecting the dots behind adversary behavior? We are looking for an ambitious Security Analyst to join a high-impact Security & Compliance team. In this dynamic role, you will work side-by-side with Senior Security Analysts and global security leadership to hunt for hidden threats, analyze complex attack paths, participate in occasional red team/pentesting exercises, and drive exposure management across a modern enterprise infrastructure. If you thrive on threat telemetry, investigative analysis, and staying two steps ahead of real-world attackers, this is your chance to sharpen your skills at a global scale. What You’ll Do Hunt & Investigate: Execute hypothesis-driven threat hunts across endpoint, identity, cloud, and network telemetry to uncover sophisticated adversary activity. Respond to Incidents: Collaborate with senior leadership and cross-functional teams (SOC, Privacy, Legal, IT) during high-priority security events. Exposure & Vulnerability Management: Leverage the Threat & Exposure Management framework to identify misconfigurations, analyze attack paths, prioritize vulnerabilities, and route them for remediation. Map Adversary Tradecraft: Analyze attacker tactics and techniques using the MITRE ATT&CK framework and live threat intelligence. Red Team Collaboration: Support occasional red team and penetration testing exercises to validate defenses and identify chained weaknesses. Actionable Insights: Turn threat intelligence and hunt findings into concrete detection logic, response playbooks, and clear executive documentation. What We’re Looking For Experience: 3+ years in Threat Intelligence, Threat Hunting, or Incident Response within enterprise environments. Technical Mastery: Hands-on experience with EDR platforms, SIEM/log analytics tools, and a solid understanding of vulnerability exploitation, exposure management, and attack path analysis. Threat Knowledge: Deep understanding of modern intrusion techniques, attacker tradecraft, and telemetry correlation. Mindset: Strong critical thinking under pressure, high autonomy, and effective communication skills to translate complex technical findings for non-technical stakeholders. Education: Bachelor’s degree in Cybersecurity, Computer Science, or equivalent practical experience. Nice-to-Haves / Certifications: GIAC: GCIA, GCIH, GCED, GCIR, GNFA, GCFA Offensive / Red Team: OSCP, OSCE, CRTO, CRTP, CRTA DFIR: CFCE, EnCE, or related specialized credentials