Cyber Security Analyst

With over 100 years’ accumulated experience, ZIEHL-ABEGG is the world leading fan and motor manufacturer. We are the proven leader in the fan and ventilation market, providing innovative and energy efficient solutions to our business partners and customers.

The Cybersecurity Analyst is responsible for protecting the organization’s information systems, networks, and data from cyber threats. This role involves monitoring security systems, identifying vulnerabilities, responding to incidents, and implementing security measures to safeguard digital assets. The ideal candidate is analytical, detail-oriented, and proactive in identifying and mitigating risks, with at least 2 years of hands-on penetration testing experience across web applications, internal networks, Active Directory, and Microsoft 365 environments; exposure to cloud and OT/ICS security assessments is considered a strong advantage.

Job Duties :

• Monitor and analyze security alerts from SIEM, XDR, and endpoint protection tools
• Perform triage, investigation, and root cause analysis of cybersecurity incidents
• Coordinate incident response activities with global SOC and regional IT teams
• Conduct vulnerability assessments and risk analyses
• Implement and maintain security controls, tools, and technologies
• Document security incidents, findings, and remediation recommendations
• Ensure compliance with global cybersecurity policies and standards
• Conduct regular security audits and compliance checks
• Support information security projects or initiatives Eg.ransomware, phishing, and malware prevention initiatives
• Stay current with emerging cybersecurity threats and best practices
• Conduct security assessments for new software, hardware, and solution requests
• Act as the regional contact point for information security topics
• Escalate critical security risks appropriately to Regional IT Director and Global CISO
• Perform penetration tests and security assessments on web applications, internal networks, Active Directory, Microsoft 365 and OT environments.
• Identify, validate, and document security vulnerabilities and provide remediation recommendations.
• Support security improvement initiatives through offensive security testing, attack path analysis, and the tracking of remediation activities to ensure identified findings are appropriately addressed and resolved.

Job Requirements :

• Bachelor’s degree in Computer Science, Cybersecurity, or equivalent technical background
• Minimum 5+ years experience in Security Operations Center (SOC),cybersecurity or similar environment
• Strong understanding of IT security principles and risk management
• Strong understanding of network protocols, firewalls, intrusion detection/prevention systems, and endpoint security
• Knowledge of vulnerability scanning tools and risk assessment methodologies
• Experience in manufacturing environments (IT/OT security exposure preferred)
• Hands-on experience with at least two of the following: SIEM tools (e.g., Splunk), Microsoft Defender (XDR/EDR), Burp Suite, Metasploit, Nessus, Nmap, Kali Linux, etc
• Minimum 2 years of hands-on penetration testing experience. Red Team experience is required, including adversary simulation and attack path analysis
• Experience performing web application, internal network, Active Directory, and Microsoft 365 security assessments.
• Strong understanding of penetration testing methodologies, OWASP Top 10, privilege escalation, and attack path analysis.,30