Cyber Security Analyst(003917)

Cyber Security Analyst(003917)

Digital Hub China in Nanjing attracts, grows, and develops passionate people who will meaningfully impact the digital future of BASF. Come join us and be a part of our digitalization journey.

Objectives:

数字化将成为巴斯夫DNA的真正组成部分，创造令人兴奋的全新客户体验和业务增长，并提高流程效率。全球数字服务正在支持巴斯夫业务的数字化转型。我们的使命是推动巴斯夫的数字化转型，通过强大的敏捷文化，提供创新的、全球性的、高质量的数字化产品和服务。南京数字中心是我们为巴斯夫提供区域和全球解决方案的全球重要基地之一

Main Tasks:

• 在此职位上，您将专注于以下目标
• 网络安全事件管理：
• 确保事件响应活动的 24x7 全天候可用性
• 管理和审查对实时事件的响应，记录调查结果并实施适当的补救措施
• 处理网络安全事件，包括识别/分类、分析和遏制步骤，直至最终解决
• 创建管理不同网络安全事件经验教训的文档
• 开发，记录和实施事件响应流程和程序，并不断改进它们
• 构建和维护事件响应流程的自动化
• 安全监控：
• 支持和管理由一级安全分析师上报的案例（目前外包给 MSSP - 托管安全服务提供商）
• 根据对威胁情报和事件响应中的应用使用的详细了解，提供专家技术建议和领导力
• 旨在确保 24x7 全天候监控网络、基础设施、应用程序和云环境中的潜在异常情况
• 您将成为巴斯夫集团网络防御团队中积极进取、技术娴熟的DFIR专家团队的一员
• 您将完成安全事件会审、分析、解决和关闭的技术方面，重点关注复杂事件和高风险事件
• 您执行数字调查和取证分析
• 通过应用分析结果来提高巴斯夫的整体安全成熟度，从而改善安全控制和运营流程
• 此外，我们要求您主动建议/开发我们的检测和预防性安全争议用例，以检测巴斯夫企业网络中的可疑活动
• 作为安全专家社区的一员，您将与巴斯夫集团的其他运营部门密切合作

Digitalization will be a true part of BASF’s DNA that creates new exciting customer experiences and business growth as well as drives efficiencies in processes. Global Digital Services is supporting BASF business in Digitalization transformation. Our mission is to drive forward the digital transformation of BASF, providing innovative, global and high-quality digital products and services through a strong agile culture. The Digital Hub Nanjing is one of our global key locations to deliver regional and global solutions for BASF.

In this role, you will focus on the following objectives

• Cyber security incident management:
• Ensure 24x7 availability for incident response activities
• Manage and review responses to live incidents, document findings and implement suitable remediation actions
• Handle cyber security incidents covering identification/triage, analysis and containment steps up to final resolution
• Create documentation of lessons learned from managing different cyber security incidents
• Develop, document & implement incident response process and procedures and continuously improve them
• Build and maintain automation for incident response processes
• Security monitoring:
• Support and manage cases escalated by Tier-1 security analyst (currently outsourced to MSSP - managed security service provider)
• Provide expert technical advice and leadership based on detailed understanding of threat intelligence and applied use within incident response
• Aim to ensure 24x7 monitoring for potential anomalies in network, infrastructure, applications and cloud environments
• You will be part of a team of highly motivated and skilled DFIR experts in the Cyber Defense team of BASF Group
• You accomplish technical aspects of security incident triage, analysis, resolution and closure, focusing on complex incidents and high-risk events.
• You perform digital investigations and forensic analyses.
• Improve security controls and operational processes by applying the findings of the analysis to increase overall BASF security maturity level.
• Furthermore, you are requested to proactively suggest / develop use-cases for our detective and preventive security controsl in order to detect suspicious activities within the BASF Corporate Network.
• As part of a community of security experts, you will work closely with other operational units of the BASF Group.

Job Requirements:

• 应用IT，计算机科学或类似技术学士学位
• 拥有4 +多年的网络安全/网络防御专业经验

您必备的技能/知识：

• 深入了解用于基于网络和主机的事件分析的各种开源和商业分析工具
• 对主流操作系统（如Microsoft Windows和Linux）的原理和结构有高级知识
• 能够使用以下编程语言中的至少一种进行编程：C，PERL，Python，汇编（x86，x64）和常见的UNIX shell。
• 良好的组织和时间管理能力
• 自信的中英文沟通，包括口语和书面表达能力

希望您拥有：

• 首选认证
• SANS GIAC GCIH - GIAC
• SANS GIAC GCFA - GIAC
• SANS GIAC GCFE - GIAC
• SANS GIAC GNFA - GIAC

Job Requirements:

• Degree in applied IT, computer science or a comparable technical apprenticeship
• 4+ years of professional experience in Cyber Security / Cyber Defense

Mandatory

• Deep understanding of various open source and commercial analysis tools used for incident analysis, both network and host based
• Advanced-level knowledge in the principles and structures of mainstream operating systems such as Microsoft Windows and Linux
• Ability to program in at least one of the following programming languages: C, PERL, Python, Assembly (x86, x64) and common UNIX shells
• Good organizational and time management skills
• Confident communication in Chinese and English, both spoken and written

Nice to have

• Preferred certifications
• SANS GIAC GCIH - GIAC Certified Incident Handler
• SANS GIAC GCFA - GIAC Certified Forensic Analyst
• SANS GIAC GCFE - GIAC Certified Forensic Examiner
• SANS GIAC GNFA - GIAC Certified Network Forensic Analyst

巴斯夫中国数字化中心于2020年在南京成立。作为全球数字中心的重要部分，中国中心正在迅速发展中，未来将会有更多岗位开放。巴斯夫专注于数字化和创新的IT解决方案，以增强巴斯夫在中国的IT化和专业化，为巴斯夫带来了一支全方位的数字化人才团队，在中国独特的数字化环境中创造解决方案。中心还为湛江一体化基地等大型项目的智能制造做出贡献。

在巴斯夫，我们为可持续发展的未来，创造化学新作用。我们将经济成功与环境保护相结合。我们肩负社会责任。巴斯夫集团超过110，000名员工为巴斯夫的成功做出了贡献。我们的客户遍布世界上几乎所有行业和几乎每个国家。我们的产品组合分为六个部分：化学品，材料，工业解决方案，表面活性剂，营养与护理以及农业解决方案。巴斯夫2020 年销售额为 590 亿欧元。更多信息请见 www.basf.com。

Digital Hub China was founded in 2020 in Nanjing. As part of the Global Digital Hub Verbund, the hub is rapidly growing with a target of a three-digit number of employees in coming years. Focused on digitalization and innovative IT solutions to enhance BASF’s IT portfolio and expertise in China, it brings an all-around capable team of digital talents to create solutions in the context of China’s unique digital landscape to BASF. It also contributes to the smart manufacturing endeavors for the new mega project in Zhanjiang.

At BASF, we create chemistry for a sustainable future. We combine economic success with environmental protection and social responsibility. More than 110,000 employees in the BASF Group contribute to the success of our customers in nearly all sectors and almost every country in the world. Our portfolio is organized into six segments: Chemicals, Materials, Industrial Solutions, Surface Technologies, Nutrition & Care and Agricultural Solutions. BASF generated sales of €59 billion in 2020. Further information at www.basf.com.

BASF Asia-Pacific Service Center is based in Malaysia, we may reach you via Malaysia phone number.

请时刻警惕任何可能的招聘欺诈行为！请注意，巴斯夫绝不会在任何情况下向候选人以任何形式收取任何费用。

A unique total offer: you@BASF

At BASF you get more than just compensation. Our total offer includes a wide range of elements you need to be your best in every stage of your life. That’s what we call you@BASF. Click here to learn more.

A unique total offer: you@BASF

At BASF you get more than just compensation. Our total offer includes a wide range of elements you need to be your best in every stage of your life. That’s what we call you@BASF. Click here to learn more.

Your application

Here you find anything you need to know about your application and the application process.

Contact us

You have questions about your application or on how to apply in Europe? The BASF Talent Acquisition Europe team is glad to assist you.

Please note that we do not return paper applications including folders. Please submit copies only and no original documents.