OverviewBruker is seeking a Cyber Security Analyst to join our Global Information Security Operations team. This role is responsible for monitoring, detecting, investigating, and responding to cybersecurity threats across Bruker's global environment. The analyst will play a key role in protecting enterprise systems, supporting incident response activities, improving security monitoring capabilities, and collaborating with global IT and business teams to strengthen the organization's security posture.
ResponsibilitiesKey Responsibilities- Monitor and analyze security alerts generated from Microsoft Defender XDR, Microsoft Sentinel, and other security platforms.
- Investigate security incidents and coordinate containment, eradication, and recovery activities.
- Conduct threat hunting activities using MITRE ATT&CK methodologies and threat intelligence sources.
- Analyze endpoint, identity, cloud, email, and network telemetry to identify malicious activity.
- Perform phishing investigations and support user awareness initiatives.
- Develop and improve detection rules, analytics, and SOC monitoring use cases.
- Support digital forensic investigations and root cause analysis efforts.
- Collaborate with IT infrastructure, cloud, networking, and compliance teams during incident response activities.
- Contribute to SIEM tuning, automation, and continuous SOC process improvements.
- Create and maintain incident reports, operational metrics, and executive summaries.
- Participate in on-call and major incident response activities as required.
QualificationsRequired Qualifications- Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field.
- 3-5 years of cybersecurity, SOC, incident response, or threat detection experience.
- Hands-on experience with:
- Microsoft Defender XDR
- Microsoft Sentinel
- Kusto Query Language (KQL)
- SIEM technologies
- Incident Response processes
- Threat Hunting methodologies
- Knowledge of MITRE ATT&CK and Cyber Kill Chain frameworks.
- Experience investigating endpoint, identity, email, and cloud-based threats.
- Strong analytical and problem-solving skills.
- Excellent written and verbal communication skills.
Preferred Qualifications- Experience securing Microsoft Azure environments.
- Knowledge of scripting or automation technologies (PowerShell, Python).
- Familiarity with SOAR solutions and security automation.
- Experience with digital forensics and malware analysis.
Preferred Certifications- Microsoft Certified: Security Operations Analyst Associate (SC-200)
- Microsoft Certified: Azure Security Engineer Associate (AZ-500)
- CompTIA Security+
- CompTIA CySA+
- GIAC Certified Incident Handler (GCIH) or equivalent certifications.
What Success Looks Like- Effective identification and response to cybersecurity incidents.
- Continuous improvement of detection and monitoring capabilities.
- Reduction of response times through automation and process optimization.
- Strong collaboration with global security and IT teams.
- Contribution to Bruker's overall cyber resilience strategy.
At Bruker, base salary is part of our total compensation. The estimated base salary range for this full-time position is between $65,250 and $116,000 and provides an opportunity to progress as you grow and develop within a role. The base salary for the role will depend on several job-related factors, including, but not limited to, education, training, experience, the geographic location of the successful candidate, skills, competencies, job-related knowledge and travel requirements for this position. Full-time employees may also be eligible for a performance-related incentive in addition to a full range of benefits including 401(k) with company match, an employee stock purchase plan, medical and dental plans, life insurance, short-term and long-term disability insurance, employee assistance program and paid time off including vacation, sick time and holidays, and more.
#LI-DG1
