Senior Information Security Analyst at Mondelēz International
Worldwide
<p></p><h2><span>Job Description</span></h2><p></p><p><b><span>Join our Mission to Lead the Future of Snacking. Make It Uniquely Yours.</span></b><span><span> </span></span><span> </span></p><p><span><span> </span></span><span><span> </span></span><span> </span></p><p><span><span>You<span> </span></span><span>will<span> </span></span><span>work in the Cybersecurity<span> </span></span><span>Incident<span> </span></span><span>Response Center at MDLZ as a Senior Information Security<span> </span></span><span>A</span><span>nalyst</span><span>. </span></span><span> </span></p><p><span><span> </span></span><span><span> </span></span><span> </span></p><p><b><span>How you will contribute</span></b><span><span>:</span></span><span> </span></p><p><span><span>As a Senior Incident Response<span> </span></span><span>A</span><span>nalyst</span><span><span> </span>you will play a vital role in strengthening MDLZ security measures. You will investigate and respond to security incidents, collaborate with cross-functional teams, and drive resolution to complex cybersecurity issues within our environment. Your<span> </span></span><span>expertise</span><span><span> </span>will<span> </span></span><span>contribute</span><span><span> </span></span><span>strong and well-designed</span><span><span> </span>Incident Response techniques, processes, and capabilities.</span><span><span> </span>You will be asked to<span> </span></span><span>partner on</span><span><span> </span>improvements both within and outside of the security domain to<span> </span></span><span>drive</span><span><span> </span>increases in team, department, and organizational maturity.</span></span><span> </span></p><p><span><span> </span></span><span> </span></p><p><b><span>What you will bring</span></b><span><span>:</span></span><span> </span></p><ul><li><p><span><span>Take ownership of enhancing our security posture and protecting MDLZ infrastructure</span></span><span> </span></p></li></ul><ul><li><p><span><span>Be adept at technical writing.</span></span><span> </span></p></li></ul><ul><li><p><span><span>Capable of communicating<span> </span></span><span>with both</span><span><span> </span>technical and nontechnical stakeholders</span><span><span> </span>across all levels including C-suite with ability to scope, tailor, and triage information shared to the roles and business priorities of audiences</span></span><span> </span></p></li></ul><ul><li><p><span><span>Develop and execute comprehensive containment, eradication, and recovery strategies, prioritizing business continuity and minimizing disruption to<span> </span></span><span>business</span><span><span> </span>processes. Coordinate response activities with</span><span><span> </span>incident response teams,</span><span><span> </span>internal stakeholders</span><span>,</span><span><span> </span>and external partners.</span><span><span> </span>F</span><span>ollow established<span> </span></span><span>and best-practice<span> </span></span><span>incident response procedures</span><span><span> </span></span><span>while</span><span><span> </span>iterat</span><span>ing</span><span><span> </span>as nec</span><span>essary for novel events.</span></span><span> </span></p></li></ul><ul><li><p><span><span>Collaborate closely with a wide range of technical and non-technical teams across business functions and geographies. Effectively scope, tailor, and triage incident information for diverse audiences, including C-suite executives, providing clear, concise, and<span> </span></span><span>timely</span><span><span> </span>updates.</span></span><span> </span></p></li></ul><ul><li><p><span><span>Perform in-depth malware analysis, network forensics, log analysis, and reverse engineering to<span> </span></span><span>identify</span><span><span> </span>root cause</span><span>s</span><span>,<span> </span></span><span>establish</span><span><span> </span>timelines, and uncover Indicators of Compromise (IOCs) and Tactics, Techniques, and Procedures (TTPs)</span><span><span> </span>both independent</span><span>ly and in partnership with security, technology</span><span>, and business roles</span><span>.</span></span><span> </span></p></li></ul><ul><li><p><span><span>Contribute significantly to the continuous review, refinement, and expansion of incident response playbooks, runbooks, and Standard Operating Procedures (SOPs), aligning them with industry best practices (e.g., NIST,<span> </span></span><span>MITRE</span><span>) and our unique global context.</span></span><span> </span></p></li></ul><ul><li><p><span><span>Embody a</span><span><span> </span>passion</span><span><span> </span>for growth</span><span><span> </span>and drive<span> </span></span><span>for continuous learning</span></span><span> </span></p></li></ul><ul><li><p><span><span>Act as a coach and mentor to<span> </span></span><span>other<span> </span></span><span>analysts, elevating skills and contributing to overall uplift of our global cybersecurity capabilities. Provide technical training sessions to various MDLZ global teams.</span></span><span> </span></p></li></ul><ul><li><p><span><span>Perform</span><span><span> </span>"lessons learned" reviews for significant incidents,<span> </span></span><span>identifying</span><span><span> </span>systemic weaknesses and driving recommendations for security control improvements, architectural enhancements, and organizational changes to prevent recurrence.</span></span><span> </span></p></li></ul><ul><li><p><span><span>Contribute to team’s<span> </span></span><span>expansive</span><span><span> </span></span><span>skill</span><span><span> </span>set across topics like<span> </span></span><span>reverse-engineering</span><span>, cloud security, process development, scripting in Python, PowerShell, Bash, C/C++, ICS protocols, AI-based automation</span><span>, and more.</span></span><span> </span></p></li></ul><p></p><p></p><p><b><u>More about this role</u></b></p><p></p><ul><li><p><span><span>Global Cybersecurity Incident Response Team with a rotational on-call schedule</span></span><span> </span></p></li></ul><ul><li><p><span><span>Monitor computer<span> </span></span><span>environments</span><span><span> </span>for security issues</span></span><span> </span></p></li></ul><ul><li><p><span><span>Perform Threat Analysis on events reported by<span> </span></span><span>s</span><span>ecurity<span> </span></span><span>t</span><span>ools</span><span>, external parties, and internal<span> </span></span><span>SMEs</span></span><span> </span></p></li></ul><ul><li><p><span><span>Investigate security breaches and other cybersecurity</span><span><span> </span>events / incidents</span></span><span> </span></p></li></ul><ul><li><p><span><span>Contribute to<span> </span></span><span>R</span><span>oot<span> </span></span><span>C</span><span>ause<span> </span></span><span>A</span><span>nalysis,<span> </span></span><span>L</span><span>essons<span> </span></span><span>L</span><span>earned, and</span><span><span> </span>C</span><span>orrective<span> </span></span><span>A</span><span>ction<span> </span></span><span>Reporting</span><span> </span></span><span> </span></p></li></ul><ul><li><p><span><span>Create</span><span><span> </span></span><span>executive summaries,<span> </span></span><span>s</span><span>tatus<span> </span></span><span>r</span><span>eport</span><span>s</span><span><span> </span>and<span> </span></span><span>supply<span> </span></span><span>metrics to relevant stakeholders</span><span><span> </span>independently</span></span><span> </span></p></li></ul><ul><li><p><span><span>Participate in special projects as needed</span></span><span> </span></p></li></ul><p><span> </span></p><p><b><span>What extra ingredients you will bring: </span></b><span> </span></p><p><span><span> </span></span><span> </span></p><p><span><span>Education / Certifications: </span></span><span> </span></p><ul><li><p><span><span>Bachelor’s Degree in Information Technology</span><span>, Cybersecurity, Computer Science or similar.</span></span><span> </span></p></li></ul><ul><li><p><span><span>Hold p</span><span>rofessional certifications<span> </span></span><span>through certifying bodies like</span><span>:</span></span><span> </span></p></li></ul><ul><li><p><span><span>CompTIA:<span> </span></span><span>Security+,<span> </span></span><span>CySA</span><span>+</span></span><span> </span></p></li></ul><ul><li><p><span><span>SANS-GIAC:<span> </span></span><span>GCIH,<span> </span></span><span>GDAT, GPEN, GCFE, GRI</span><span>D</span></span><span> </span></p></li></ul><ul><li><p><span><span>ISC2: CISSP</span></span><span> </span></p></li></ul><ul><li><p><span><span>Offsec</span><span>: OCSP, OSIR</span></span><span> </span></p></li></ul><p><span><span> </span></span><span> </span></p><p><span><span> </span></span><span><span> </span></span><span> </span></p><p><span><span>Job specific requirements: </span></span><span> </span></p><ul><li><p><span><span>3-</span><span>6+</span><span><span> </span></span><span>years experience</span><span><span> </span></span><span>in</span><span><span> </span></span><span>I</span><span>ncident<span> </span></span><span>R</span><span>esponse,<span> </span></span><span>I</span><span>nformation<span> </span></span><span>S</span><span>ecurity, SOC</span><span>,</span><span><span> </span></span><span>Forensics,<span> </span></span><span>Purple-teaming,<span> </span></span><span>or related field</span></span><span> </span></p></li></ul><ul><li><p><span><span>Knowledge/Experience<span> </span></span><span>i</span><span>n: </span></span><span> </span></p></li></ul><ul><li><p><span><span>SIEM (</span><span>ie</span><span><span> </span>Splunk,<span> </span></span><span>Humio</span><span>), SOAR (</span><span>ie</span><span><span> </span></span><span>Cyware</span><span>,<span> </span></span><span>Splunk, XSOAR</span><span>), Endpoint Security (EDR) (</span><span>ie</span><span><span> </span></span><span>CarbonBlack</span><span>,<span> </span></span><span>Crowdstrike</span><span>, Defender</span><span>), Email Security (</span><span>ie</span><span>. Proo</span><span>f</span><span>point, O365</span><span><span> </span>ATP</span><span>), Firewalls, WAF, IDS/IPS, Web Content Filtering, Proxies, Database, Data Loss Prevention (DLP), Identity and Access Management (IAM), Cloud Computing Services, Scripting, MITRE ATT&CK Framework and Incident Response</span><span>,</span><span><span> </span>NIST, </span><span><span> </span></span><span>Cloud<span> </span></span><span>Compute<span> </span></span><span>(</span><span>ie</span><span><span> </span></span><span>AWS, GCP, Azure</span><span>),</span><span><span> </span></span><span>Cloud Native Application Protection</span><span><span> </span>(</span><span>ie</span><span><span> </span></span><span>Forcepoint</span><span><span> </span>ONE</span><span>,<span> </span></span><span>Wiz,<span> </span></span><span>Orca</span><span>)</span></span><span> </span></p></li></ul><p><span><span> </span></span><span> </span></p><p><b><span>Travel requirements: </span></b><span> </span></p><ul><li><p><span><span>Occasional</span></span><span> </span></p></li></ul><p><span><span> </span></span><span><span> </span></span><span> </span></p><p><b><span>Work schedule: </span></b><span> </span></p><ul><li><p><span><span>Remote</span></span><span> </span></p></li></ul><ul><li><p><span><span>On-call</span></span><span> </span></p></li></ul><p></p><h2></h2>No Relocation support available<p></p><h2><span><b>Business Unit Summary</b></span></h2><p></p><h3><span>Headquartered in Singapore, Mondelēz International’s Asia, Middle East and Africa (AMEA) region is comprised of six business units, has more than 21,000 employees and operates in more than 27 countries including Australia, China, Indonesia, Ghana, India, Japan, Malaysia, New Zealand, Nigeria, Philippines, Saudi Arabia, South Africa, Thailand, United Arab Emirates and Vietnam. Seventy-six nationalities work across a network of more than 35 manufacturing plants, three global research and development technical centers and in offices stretching from Auckland, New Zealand to Casablanca, Morocco. Mondelēz International in the AMEA region is the proud maker of global and local iconic brands such as <i>Oreo </i>and </span><i><span>belVita</span></i><span> biscuits, <i>Kinh Do </i>mooncakes, <i>Cadbury, Cadbury Dairy Milk</i> and </span><i><span>Milka</span></i><span> chocolate, <i>Halls</i> candy, <i>Stride</i> gum, <i>Tang</i> powdered beverage and <i>Philadelphia</i> cheese. We are also proud to be named a Top Employer in many of our markets.</span></h3><p></p><p>Mondelēz International is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation or preference, gender identity, national origin, disability status, protected veteran status, or any other characteristic protected by law.</p><p></p><p></p><h2><b><span>Job Type</span></b></h2><p></p>Regular<p></p><p></p>Information Security<p></p><p></p>Technology & Digital
Apply Now