Information Security Analyst

Description

Are You Ready to Make It Happen at Mondelēz International?

Contribute measurably to goalsof enhancing our security posture and protecting MDLZ infrastructure

Be adept at technical writing

Capable of communicatingwith bothtechnical and nontechnical stakeholdersacross all levels including C-suite with ability to scope, tailor, and triage information shared to the roles and business priorities of audiences

Contribute tocomprehensive containment, eradication, and recovery strategies, prioritizing business continuity and minimizing disruption to business processes.Help to coordinate response activities withincident response teams,internal stakeholders,and external partners.Follow established and best-practice incident response procedureswhileiteratingas necessary for novel events.

Collaborate closely with a wide range of technical and non-technical teams across business functions and geographies.Assist withscope, tailoring, and triageof event / incident information for diverse audiences, including C-suite executives, providing clear, concise, and timely updates.

Contribute toin-depth malware analysis, network forensics, log analysis, and reverse engineering to identify root causes, establish timelines, and uncover Indicators of Compromise (IOCs) and Tactics, Techniques, and Procedures (TTPs)both independently and in partnership with security, technology, and business roles.

Contribute to the continuous review, refinement, and expansion of incident response playbooks, runbooks, and Standard Operating Procedures (SOPs), aligning them with industry best practices (e.g., NIST, MITRE) and our unique global context.

Embody apassionfor growthandadrivefor continuous learning

Act aspeer and partner withotheranalysts,contributing to overall uplift of our global cybersecurity capabilitiesthrough effective teamwork.

Contribute to"lessons learned" reviews for significant incidents, identifying systemic weaknesses andassisting with generation ofrecommendations for security control improvements, architectural enhancements, and organizational changes to prevent recurrence.

Contribute to team’sexpansiveskill setand work to expand your own skillsacross topics like reverse-engineering, cloud security, process development, scripting in Python, PowerShell, Bash, C / C++, ICS protocols, AI-based automation, and more

More about this role

What you need to know about this position :

Global Cybersecurity Incident Response Team with a rotational on-call schedule

Monitor computerenvironmentsfor security issues

Perform Threat Analysis on events reported bysecuritytools, external parties, and internalSMEs

Assist team with investigationofsecurity breaches and other cybersecurityeventsand incidents

Contribute toRootCauseAnalysis,LessonsLearned, andCorrectiveActionReporting

Contribute toexecutive summaries,statusreportsandsupplymetrics to relevant stakeholders

Participate in special projects as needed

What extra ingredients you will bring :

Education / Certifications :

Bachelor’s Degree in Information Technology, Cybersecurity, Computer Science or similar.

Hold professional certificationsthrough certifying bodies like :

CompTIA : Security+,CySA+

SANS-GIAC : GCIH,GDAT, GPEN, GCFE, GRID

ISC2 : CISSP

Offsec : OCSP, OSIR

Job specific requirements :

3-6+years experienceinIncidentResponse,InformationSecurity, SOC,Forensics,Purple-teaming,or related field

Knowledge / Experiencein :

SIEM (ieSplunk,Humio), SOAR (ieCyware,Splunk, XSOAR), Endpoint Security (EDR) (ieCarbonBlack,Crowdstrike, Defender), Email Security (ie. Proofpoint, O365ATP), Firewalls, WAF, IDS / IPS, Web Content Filtering, Proxies, Database, Data Loss Prevention (DLP), Identity and Access Management (IAM), Cloud Computing Services, Scripting, MITRE ATT&CK Framework and Incident Response,NIST, CloudCompute(ieAWS, GCP, Azure),Cloud Native Application Protection(ieForcepointONE,Wiz,Orca)

Travel requirements :

Occasional

Work schedule : Remote

On-call

No Relocation support available

Business Unit Summary

Headquartered in Singapore, Mondelēz International’s Asia, Middle East and Africa (AMEA) region is comprised of six business units, has more than 21,000 employees and operates in more than 27 countries including Australia, China, Indonesia, Ghana, India, Japan, Malaysia, New Zealand, Nigeria, Philippines, Saudi Arabia, South Africa, Thailand, United Arab Emirates and Vietnam. Seventy-six nationalities work across a network of more than 35 manufacturing plants, three global research and development technical centers and in offices stretching from Auckland, New Zealand to Casablanca, Morocco. Mondelēz International in the AMEA region is the proud maker of global and local iconic brands such as Oreo and belVita biscuits, Kinh Do mooncakes, Cadbury, Cadbury Dairy Milk and Milka chocolate, Halls candy, Stride gum, Tang powdered beverage and Philadelphia cheese. We are also proud to be named a Top Employer in many of our markets.

Mondelēz International is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation or preference, gender identity, national origin, disability status, protected veteran status, or any other characteristic protected by law.

Job Type

RegularInformation SecurityTechnology & Digital