Principal Analyst – Cyber Security Defense Center

About the role

As the Principal Analyst in the Cyber Security Defense Center, you will be the senior technical authority driving the detection and response strategy for BASF’s digital environment. You will lead complex incident investigations, shape threat‑hunting programs and guide the automation roadmap, ensuring robust protection for the company’s assets.

Key responsibilities

• Lead technical response to high‑risk security incidents as Case Lead, overseeing triage, containment, eradication and closure.
• Conduct deep investigations and compromise assessments, performing static and dynamic analysis and reverse engineering of malicious binaries, scripts and documents.
• Design and execute hypothesis‑driven threat‑hunting campaigns, validating findings against threat intelligence and translating them into lasting detection coverage.
• Develop, review and continuously improve detection logic, correlation rules and SOAR playbooks on the Elastic Security platform using Detection‑as‑Code practices.
• Co‑design AI‑assisted triage and investigation workflows, implementing human‑in‑the‑loop safeguards and defining the automation roadmap.

Required profile

• Extensive experience in cyber security incident response and threat hunting.
• Strong analytical mindset with the ability to dissect complex malicious artifacts.
• Proven ability to lead technical teams and influence cross‑functional security functions.
• Commitment to continuous improvement and staying current with emerging threats.

Required skills

• Elastic Security platform
• SOAR (Security Orchestration, Automation and Response) playbooks
• Static and dynamic malware analysis
• Reverse engineering
• Threat hunting methodology
• Detection‑as‑Code development
• AI‑assisted triage workflow design