About the Company

Our client is a global biotechnology organization focused on developing innovative therapies and advanced healthcare solutions for patients worldwide. The company combines cutting-edge research with modern technologies and operates in a highly international environment. Due to the scale of operations and sensitivity of data, cybersecurity, risk management, and secure enterprise infrastructure are key priorities across the organization.

About the Role

We are looking for a Senior Threat Intelligence & Incident Response Analyst to join the GTS – Security & Compliance team. This is a senior, hands-on role requiring a proactive, independent, and analytical mindset.

You will lead threat hunting, threat intelligence, and incident response initiatives, playing a key role in identifying attacker behavior, investigating incidents, and proactively uncovering risks across a global enterprise environment.

Key Responsibilities

• Lead threat hunting, threat intelligence, and incident response activities

• Conduct hypothesis-driven threat hunts, including attack path and exposure-based analysis across endpoint, identity, cloud, and network telemetry

• Rapidly assess, investigate, and respond to high-priority security events

• Analyze adversary behavior using MITRE ATT&CK and real-world threat intelligence

• Partner with Vulnerability Management to prioritize vulnerabilities based on exploitability and exposure

• Identify misconfigurations, attack paths, and chained weaknesses across the environment

• Translate findings into actionable detection, response, and security improvement recommendations

• Collaborate with SOC, IT, Privacy, Legal, Compliance, Vulnerability Management, and business stakeholders

• Work closely with external partners (e.g. EDR providers such as CrowdStrike) during investigations

• Produce high-quality documentation and senior-level briefings for leadership

Requirements

• 4+ years of experience in Threat Intelligence, Threat Hunting, or Incident Response

• Proven experience leading investigations in enterprise environments

• Strong hands-on experience with EDR platforms and SIEM / log analytics tools

• Strong understanding of vulnerability exploitation, exposure management, and attack path analysis

• Deep knowledge of adversary tradecraft and modern intrusion techniques

• Ability to work independently, think quickly, and make sound decisions under pressure

• Strong communication skills (technical and non-technical audiences)

No direct people management responsibilities, but opportunity to provide technical leadership and mentorship.

Education & Certifications

• Bachelor’s degree in Cybersecurity, Computer Science, or related field (or equivalent experience)

• Certifications are a plus, such as:

  • GIAC (GCIA, GCIH, GCED, GCIR, GNFA, GCFA)

  • Offensive Security (OSCP, OSCE)

  • Red Team / Adversary Emulation (CRTO, CRTP, CRTA)

  • DFIR certifications (GCFA, GNFA, CFCE, EnCE)