Corporate Cyber Security Senior Analyst

Questa posizione è in Barilla

Il processo di selezione sarà interamente gestito Barilla.

--

# About Barilla

At Barilla, we believe that every great journey begins with passion and a bold vision. From our humble beginnings in 1877 in a small shop in Parma, Italy, we’ve blossomed into a global leader in the food industry, guided by our commitment to progress and excellence.

Today, Barilla is an international group present in more than 100 countries and we are proud to be recognized as the world’s top food company by reputation. With 22 beloved brands in our portfolio, we are world leader for pasta, the number one choice for ready-made sauces in Europe, leader for bakery products in Italy, and for crispbread across Scandinavia with Wasa.

Our success story is written by a passionate team of almost 9,000 dedicated employees across 30 plants and offices worldwide, all united by a shared mission to nourish the future with purpose and passion.

Are you ready to add your unique flavor to our journey?

## Position Summary

The Cyber Security Senior Analyst operates within the Global Corporate Cybersecurity team (distinct from Regional and Plant roles) and supports the secure and resilient operation of Barilla's global digital environment through hands-on cybersecurity operations and engineering, technical oversight of external managed services and delivery of cybersecurity change. Reporting to the Global Corporate Cybersecurity Manager, the role is part of the Cybersecurity Director's organisational line and may engage directly with the Director on delegated activities, technical reviews, management-review inputs or major escalations. It has no internal direct reports but may technically supervise service providers, consultants and specialists. It leads low- and medium-complexity cybersecurity initiatives, owns assigned work packages within high- or critical-complexity programmes, and is a core operational contributor to incident response and threat hunting. It supports the Information Security Management System and the NIS2 obligations applicable to Barilla as an important entity in the food sector.

## Key Responsibilities & Deliverables

* Operate, administer and continuously improve assigned corporate cybersecurity technologies and services across hybrid cloud, on-premises and SaaS environments. Reliable lifecycle and health management for assigned controls, CTI integrations and telemetry pipelines, covering connector health, ingestion completeness, latency, duplication and normalisation across hybrid cloud, on-premises, SaaS and relevant IT/OT environments. Tested changes and proofs of concept, current operating guides, controlled handovers to application-management services and a prioritised improvement backlog. * Perform detection engineering, CTI feed and platform integration, IoC operationalisation, threat hunting and evidence-led incident response, complementing and challenging external SOC, MDR and specialist services. Correlated investigations and attack-chain timelines that distinguish compromise, misconfiguration, false positives and authorised activity, with authorised containment and recovery validation. Validated CTI source/role mappings and IoC propagation; hunting queries and detections tested on representative telemetry for KQL/schema, cadence/lookback, severity, entity mapping, exclusions/watchlists, overlap, false positives and SOAR thresholds; improved playbooks. * Provide technical input to cybersecurity service sourcing, renewal and transition, and task, coordinate, review and challenge delivery by managed services, consultants and providers. Collaborate with third-party partners and suppliers to support the delivery of cybersecurity services and initiatives, ensuring effective execution and alignment with organizational security requirements. Evidence-based inputs to service requirements, evaluations, renewals and transitions; clear priorities, capacity/coverage visibility, reconciled queues, verified SLAs/KPIs/quality and delegated technical validation or acceptance. Challenged findings, tracked escalations and corrective actions, acceptance evidence for service transitions and SIEM/SOAR changes, measurable improvement and knowledge transfer. * Perform risk-based vulnerability, exposure and secure-configuration or hardening management, including urgent and zero-day cases, for the Corporate scope and relevant IT/OT interfaces. Validated findings prioritised by exploitability, threat context, asset criticality and business impact, with accountable remediation owners and target dates. Risk-based remediation plans and tracked exceptions with owners and dates; verified closure or documented acceptance by the accountable risk owner; consolidated backlogs, metrics and escalation of overdue critical actions. * Perform security-by-design and supplier security reviews, support GDPR privacy-by-design tech