Sr. Technical Analyst - Network Protection (São José dos Campos/SP)

At Ball, integrity and trust are the foundation of who we are. Guided by our core values —"We Care. We Work. We Win.”— we create a culture where every voice matters and every idea drives progress.  

Together with our global employees, customers, and partners, we’re turning bold sustainability goals into reality and shaping a future we can all be proud of. 

Create a new future. Apply Today. 

Main Responsibilities

• Administer, maintain, and optimize enterprise network security platforms, including Check Point, Palo Alto, Cisco ASA, VPN, and SASE technologies.
• Manage firewall policies and the complete rule lifecycle, including implementation, review, optimization, and compliance validation.
• Support secure remote access solutions and network connectivity services for global users and locations.
• Implement and maintain web application and API protection technologies, including Azure WAF and F5 ASM.
• Support SIEM integrations, security monitoring capabilities, and network security event investigations.
• Manage certificate lifecycle processes and support Public Key Infrastructure (PKI) services.
• Coordinate patching, configuration management, and compliance activities for network and security devices.
• Support OT security initiatives, including network segmentation, industrial DMZs, and secure remote access for manufacturing environments.
• Participate in the design, implementation, and continuous improvement of network protection technologies and security controls.
• Create and maintain technical documentation, standards, and operational procedures.
• Participate in incident response activities, major incident support, and on-call rotations as required.

Main Requirements

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Engineering, or related field.
• Advanced or fluent English.
• Proven experience supporting enterprise network security environments.
• Strong hands-on experience with next-generation firewalls, preferably Check Point and/or Palo Alto.
• Solid understanding of networking concepts, including TCP/IP, routing, switching, DNS, VPN, and network segmentation.
• Experience with security technologies such as WAF, SIEM, vulnerability management, PKI, or SASE solutions.
• Knowledge of cloud security principles and platforms such as Microsoft Azure and AWS.
• Experience with incident response, vulnerability remediation, and change management processes.
• Strong analytical and problem-solving skills with the ability to troubleshoot complex technical issues.
• Ability to manage multiple priorities in a fast-paced global environment.
• Strong communication, stakeholder management, and teamwork skills.
• Experience documenting processes, procedures, and technical standards.
• Experience with SNOW.

Preferred Qualifications

• Experience with Netskope, Cisco AnyConnect, Cisco ISE, Azure WAF, F5 ASM, Sentinel, Rapid7, BackBox, or Defender Exposure Management.
• Experience supporting manufacturing or OT security environments.
• Industry certifications such as CISSP, CISM, CCNA/CCNP Security, PCNSE, CCSA/CCSE, or Microsoft Security certifications.
• Experience with ITIL-based service management and continuous improvement practices.
• Experience with automation, scripting, APIs, or Infrastructure-as-Code.

Additional Information

• Location: São José dos Campos/SP - Brazil
• Hybrid On-Site Work Environment: This position requires regular in-person engagement by working on-site for three (3) days per work week (with core collaboration days of Tuesday, Wednesday and Thursday).