Description

Job DescriptionCyber Security Operations Incident Response AnalystOur company is an innovative, global healthcare leader committed to improving health and well-being in 140 countries around the world. We focus our research on conditions that affect millions of people around the world, such as Alzheimer's, Diabetes, and Cancer, while expanding our strengths in areas such as vaccines and biologics. Join us in our mission to provide leading innovations and solutions for tomorrow.We are looking to hire an experienced analyst to reinforce the cybersecurity operations team in our Prague technology hub.Responsibilities<ul><li>Independently handle incident case investigations and drive to full remediation, including triage, analysis, containment and remediation.</li><li>Assess the impact and risk of incidents, make evidence-based decisions and take appropriate actions according to defined procedures and best practice.</li><li>Utilize various security tools and technologies to detect, investigate, contain, remediate and document cyber threats.</li><li>Communicate and collaborate with other teams, including business liaisons, to ensure proper prioritization and resolution of incident cases.</li><li>Contribute to the development and enhancement of security monitoring and detection capabilities by improving detection logic, filtering, aggregation and automation.</li><li>Actively build and improve team’s knowledgebase and standard procedures.</li><li>Support, assist and provide feedback to junior colleagues.</li><li>Actively participate in development projects building functionality required by incident response team.</li><li>Stay up to date with the latest security trends, attack techniques, vulnerabilities, and best practices.</li></ul>Qualifications<ul><li>Previous experience of at least 3 years in a cyber security operations role (SOC, incident response, digital forensics, DLP, threat hunting or similar).</li><li>Strong understanding of computer networks, operating systems, security tools, log types/sources, and attack vectors.</li><li>Hands-on experience with some of the industry standard security tools (in categories like EDR, SIEM, MDM, identity management, sandboxes, proxies, firewalls, PAM).</li><li>Comprehensive knowledge of procedures for security monitoring, incident investigation, incident response, and remediation methodologies.</li><li>Investigative mindset with excellent analytical and problem-solving skills.</li><li>Scripting skills to solve data processing tasks on ad hoc basis.</li><li>Strong communication skills, both written and verbal. Experience presenting and reporting to senior leadership.</li><li>Knowledge of cloud security concepts and technologies.</li></ul>Preferred<ul><li>Industry relevant certifications (e.g. CompTIA Security, Certified Ethical Hacker, GIAC).</li><li>Experience working in a global organization and large team.</li><li>Familiarity with cyber regulatory frameworks and compliance requirements.</li></ul>What we offer:<ul><li>Exciting work in a great team, global projects, international environment</li><li>Opportunity to learn and grow professionally within the company globally</li><li>Hybrid working model, flexible role pattern</li><li>Pension and health insurance contributions</li><li>Internal reward system plus referral program</li><li>5 weeks annual leave, 5 sick days, 15 days of certified sick leave paid above statutory requirements annually, 40 paid hours annually for volunteering activities, 12 weeks of parental contribution</li><li>Cafeteria for tax free benefits according to your choice (meal vouchers, Lítačka, sport, culture, health, travel, etc.), Multisport Card</li><li>Vodafone, Raiffeisen Bank, Foodora, and other discount programs</li><li>Up-to-date laptop and iPhone</li><li>Parking in the garage for drivers or showers for bikers</li><li>Competitive salary, incentive pay, and many more</li></ul>Required Skills: Cyber Threat Hunting, Cyber Threat Intelligence, Data Loss Prevention (DLP), Detail-Oriented, Digital Forensics, Incident Investigations, Incident Response, Incident Response Management, Information Systems Management, Malware Analysis, Security Monitoring, Security Tools, Vulnerability ManagementPreferred Skills: Current Employees apply <a target="_blank" href="https://wd5.myworkday.com/msd/d/task/1422$6687.htmld">HERE</a>Current Contingent Workers apply <a target="_blank" href="https://wd5.myworkday.com/msd/d/task/1422$4020.htmld">HERE</a>Search Firm Representatives Please Read Carefully Merck & Co., Inc., Rahway, NJ, USA, also known as Merck Sharp & Dohme LLC, Rahway, NJ, USA, does not accept unsolicited assistance from search firms for employment opportunities. All CVs / resumes submitted by search firms to any employee at our company without a valid written search agreement in place for this position will be deemed the sole property of our company. No fee will be paid in the event a candidate is hired by our company as a result of an agency referral where no pre-existing agreement is in place. Where agency agreements are in place, introductions are position specific. Please, no phone calls or emails. Employee Status: RegularRelocation:VISA Sponsorship:Travel Requirements:Flexible Work Arrangements:HybridShift:Valid Driving License:Hazardous Material(s):Job Posting End Date:03/31/2026*A job posting is effective until 11:59:59PM on the day BEFORE the listed job posting end date. Please ensure you apply to a job posting no later than the day BEFORE the job posting end date.

Incident Responder

Description

Merck & Co.

Pipeline