• Monitor and triage security alerts from SIEM, EDR/XDR, firewall, IDS/IPS, endpoint, identity, email, cloud, and other client telemetry sources. • Perform initial investigations to validate alerts, determine scope, assess severity, and identify likely root cause. • Analyze intrusion detection alerts, firewall events, endpoint activity, system logs, network traffic, and authentication events to identify suspicious or malicious activity. • Determine whether attacks were successful, document supporting evidence, and notify clients according to established escalation and communication procedures. • Identify indicators of compromise, enrich events with threat intelligence, and map relevant activity to frameworks such as MITRE ATT&CK when appropriate. • Support incident response efforts by providing technical findings, recommended containment actions, and timely updates to clients and internal teams. • Document investigation steps, timelines, findings, client communications, and recommendations in case management systems. • Contribute to detection tuning, false-positive reduction, knowledge base articles, runbooks, and process improvements. • Conduct ongoing research on emerging threats, vulnerabilities, attacker tactics,and security operations best practices.

• Protect critical industrial environments. • Ensure the security of automation systems, industrial networks and critical infrastructure. • Ensure resilience against cyber threats that directly impact operations. • Focus on implementing and maintaining security policies, standards and security practices.

• Support maintenance of HITRUST, HIPAA, and SOC 2 compliance tasks under CTO guidance • Help draft and update internal policies and security documentation • Conduct annual risk assessments and evidence gathering for third-party audits • Monitor security practices and incidents, and drive mitigation efforts • Execute employee onboarding and offboarding checklists (system access, device setup, deprovisioning) • Manage internal tools, access controls, device management, and vendor reviews • Support device management and assist with vendor review documentation • Help maintain GCP infrastructure compliance documentation alongside the CTO • Support incident response and change management procedures

Role Description As a key player in the Eurofins network, we oversee multiple European businesses in Clinical testing area. With a vast network spanning over 350 sites in Europe, we are committed to maintaining robust IT security measures in alignment with business requirements. - Approvals: Act as a gatekeeper for sensitive access and firewall rule approvals, ensuring compliance with security policies and business needs. - Reviews: Conduct regular reviews of access permissions, firewall configurations, and IT infrastructure settings (e.g., AD, Intune, Office 365, Azure) to ensure adherence to security best practices and expectations. - Architectural Review and Change Management: Review and approve all proposed changes to the IT infrastructure, ensuring changes do not compromise security integrity. - Testing: Conduct vulnerability scans at both regional and laboratory levels, overseeing remediation efforts. Collaborate with Group Security to facilitate penetration testing as required. - Incident Response: Assist in the investigation of security breaches and provide support for security intelligence reported by the Group Security Operations Center (SOC). - Advisory Role: Work closely with newly acquired laboratories to enhance their security posture, leveraging internal security standards and the expertise of a Senior Security Analyst. Evaluate the security of both in-house and externally developed applications, providing recommendations for security enhancements. - Reporting: Contribute to the development of operational security Key Performance Indicators (KPIs) and offer recommendations for improvement based on data analysis and industry best practices. - Vulnerability Management: Oversee the vulnerability management process for our entire infrastructure, ensuring timely identification, prioritization, and mitigation of vulnerabilities. Qualifications - Bachelor's degree in Computer Science, Information Security, or related field. - Minimum of 3-5 years of experience in information security roles, with a focus on vulnerability management, incident response, and security advisory. - Professional certifications such as ISO27001 (lead implementer or auditor) are preferred. - Other certifications such as CISSP, CEH, or CISM are a plus. - Strong knowledge of IT security principles, technologies, and best practices. - Experience with security tools and technologies (e.g., vulnerability scanning tools, SIEM solutions). - Excellent communication skills, with the ability to convey technical information to both technical and non-technical audiences. - Effective English speaking and writing is mandatory. - Additional spoken languages would be a plus, especially French or Spanish. - Strong analytical and problem-solving abilities, with a keen attention to detail. - Ability to work effectively in a fast-paced, dynamic environment with multiple stakeholders. Benefits - We support your development! - Do you feel you don’t match 100% of the requirements? Don’t hesitate to apply anyway! Eurofins companies are committed to supporting your career development. - We embrace diversity! - As an Equal Opportunity Employer, the Eurofins network of companies believes in strength and innovation through diversity. - Sustainability matters to us! - We are well on our way to achieving our objective of carbon neutrality by 2025, through a combination of emission reduction and compensation initiatives. Compensation RON 8500 - RON 10500 monthly