Sr Information Security Analyst

At Perrigo, we are driven by our mission to Makes Lives Better Through Trusted Health and Wellness Solutions, Accessible to All
. We are proud to be a Top 10 player in the European Consumer Self-Care market and the largest U.S. store brand provider of over the counter and infant formula. Dedicated to providing The Best Self-Care for Everyone
, we are the people behind the brands you trust. We are Opill®, Compeed®, Solpadeine®, NiQuitin®, and many more.
We Are Perrigo
. We are committed to enhancing the wellbeing of our colleagues and consumers alike. We pride ourselves on fostering an inclusive, collaborative culture where each person can experience a sense of belonging.

Join us on our One Perrigo journey as we evolve to win in self-care.

The Senior Information Security Analyst is a senior individual contributor within the Cyber Defense team responsible for leading security investigations, incident response, threat detection and hunting, and the continuous improvement of enterprise security operations. The role works across endpoint, identity, email, cloud, and data security technologies to identify, contain, and remediate threats.

The successful candidate will be an experienced, hands-on security professional who can independently lead complex investigations, improve detections and response processes, mentor other analysts, and take ownership of key Cyber Defense capabilities. Experience with data loss prevention (DLP) and data security is strongly preferred.

• Lead investigation, containment, remediation, and post-incident review of cybersecurity incidents across endpoint, identity, email, cloud, and network environments
• Investigate suspicious activity using SIEM, EDR/XDR, identity, email security, and other enterprise security telemetry
• Develop incident timelines, determine scope and root cause, document findings, and communicate risk and recommended actions to technical and leadership stakeholders
• Perform proactive threat hunting and identify opportunities to improve detection and response coverage
• Serve as an escalation point and mentor for other security analysts during complex investigations

• Develop, tune, and improve security detections and correlation logic based on threats, incidents, and observed control gaps
• Use enterprise SIEM platforms to investigate threats, hunt across security telemetry, and improve monitoring coverage
• Support security orchestration and automation use cases, including playbooks for investigation, enrichment, containment, and notification
• Identify repetitive SOC processes that can be automated or streamlined

• Investigate endpoint threats using Crowd Strike Falcon or comparable enterprise EDR/XDR platforms
• Investigate identity-based attacks involving Active Directory, Microsoft Entra , authentication, privileged accounts, OAuth applications, and session/token abuse
• Analyze Microsoft 365 and cloud security events and work with engineering and infrastructure teams on containment and remediation
• Use threat intelligence and indicators of compromise to scope incidents and proactively hunt for related activity

• Support and improve enterprise DLP and data security monitoring across endpoint, email, cloud, and collaboration platforms
• Investigate potential data-loss, sensitive-data exposure, and policy-violation events and coordinate appropriate response
• Assist with tuning DLP policies and workflows to improve detection quality while reducing unnecessary business impact
• Partner with security, privacy, legal, and business stakeholders as appropriate during sensitive-data investigations

• Identify gaps discovered through incidents, threat hunting, and operational analysis and recommend practical improvements
• Develop and maintain investigation procedures, response playbooks, and operational documentation
• Collaborate with Security Engineering, IAM, Network, Cloud, and other technology teams to strengthen preventive and detective controls
• Take ownership of assigned Cyber Defense technologies or operational capabilities and drive their continued maturity

• Bachelor’s degree in Cybersecurity, Information Technology, or a related field, or equivalent professional experience
• 7+ years of relevant cybersecurity experience, including significant hands-on security operations, incident response, threat detection, or threat hunting experience
• Demonstrated ability to independently investigate and lead complex cybersecurity incidents
• Hands-on experience with enterprise SIEM and EDR/XDR technologies
• Strong understanding of endpoint, identity, network, email, and cloud attack techniques
• Working knowledge of Active Directory and Microsoft Entra  concepts
• Strong analytical, troubleshooting, documentation, and communication skills

• Crowd Strike Falcon, including EDR and/or Identity Protection
• Splunk…