search Browse Jobs
Principal Analyst Cyber Security Defense Center (m/f/d)BASF · Spain, Digitalization, Professional
BASF logo

BASF

company page ↗ Visa Sponsoring Company

Principal Analyst Cyber Security Defense Center (m/f/d)

✓ This company has sponsored visas before. The posting doesn't say so, but it's still worth applying.

🗓️ Posted 2026-09-18 Spain, Digitalization, Professional Full-time Hybrid ICT
💰 Salary Not shared 📊 Market 3,500 EUR–5,500 EUR/mo

About the Company

We create chemistry for a sustainable future At BASF, we create chemistry for a sustainable future. Our ambition: We want to be the preferred chemical company to enable our customers' green transformation. We combine economic success with environmental protection and social responsibility. Around 108,000 employees in the BASF Group contribute to the success of our customers in nearly all sectors and almost every country in the world. Our portfolio comprises, as core businesses, the segments Chemicals, Materials, Industrial Solutions, and Nutrition & Care; our standalone businesses are bundled in the segments Surface Technologies and Agricultural Solutions. BASF generated sales of around 60 billion in 2025. BASF shares are traded on the stock exchange in Frankfurt (BAS) and as American Depositary Receipts (BASFY) in the United States. Credits: https://www.basf.com/global/en/legal/credits Data protection information: https://www.basf.com/global/en/legal/data-protection-at-basf.html Chemical Manufacturing Specialties: Chemicals, Performance Products, Functional Materials & Solutions, Agricultural Solutions

Responsibilities

  • ● RESPONSIBILITIES
  • ● Lead the technical response to our most complex and high-risk security incidents as Case Lead - from triage and analysis through containment, eradication, resolution, and closure
  • ● Lead investigations and compromise assessments
  • ● Analyze complex malicious artifacts (binaries, scripts, documents) through static and dynamic analysis and reverse engineering to determine their underlying, often obfuscated, functionality
  • ● Drive our hypothesis-driven threat hunting program: design hunting campaigns, validate hypotheses against threat intelligence, and convert findings into durable detection coverage
  • ● Design, review, and continuously improve detection logic, correlation rules, and SOAR playbooks on our Elastic Security platform, applying Detection-as-Code practices
  • ● Shape the CSDC automation and AI roadmap: co-design AI-assisted triage and investigation workflows and supervise their operation with clear human-in-the-loop safeguards
  • ● Define the strategic roadmap for detection and response capabilities together with CSDC leadership; evaluate and recommend new technologies, tools, and methodologies
  • ● Act as technical advisor to CSDC leadership on capability development, and as senior escalation point and on-call resource for critical incidents
  • ● Mentor and train Tier 2 and Tier 3 analysts; develop advanced training content and drive knowledge transfer across the team
  • ● Lead cross-functional initiatives with adjacent teams (Cyber Threat Intelligence, Offensive Security, Vulnerability Management, Platform Engineering) and steer external service providers to meet BASF security requirements
  • ● Represent the CSDC in internal security governance bodies and in external communities and trusted networks (e.g., BSI, Deutscher CERT-Verbund, CSSA, FIRST)
  • ● QUALIFICATIONS
  • ● Degree in computer science, IT security, or a comparable technical qualification
  • ● + years of professional experience in cyber defense, incident response, with a track record as a recognized subject matter expert
  • ● Demonstrated experience leading technical teams and investigations under pressure in high-stakes situations
  • ● Technical Expertise
  • ● Expert-level knowledge of the internals of mainstream operating systems (Microsoft Windows, Linux) and of network protocols and traffic analysis
  • ● Deep understanding of current attacker tradecraft: advanced persistent threats, actors, infrastructures, and TTPs, structured along MITRE ATT&CK
  • ● Strong hands-on expertise with Elastic Security as SIEM and EDR: detection rule development and tuning, investigation and hunting; experience with Elastic automation capabilities (workflows, AI Assistant) and ES QL is a strong plus