Senior Manager, Security Engineering and Operations

Jazz Pharmaceuticals is a global biopharmaceutical company dedicated to developing life-changing medicines for people with serious diseases. The Senior Manager, Security Engineering and Operations will lead the design, implementation, support, and continuous improvement of the company’s information security stack while mentoring security teams and advising business and IT stakeholders. The role also oversees threat assessment, incident monitoring and response, security technology deployments, and automation initiatives.

Responsibilities:

• Plan, Design, Implement, and support existing and new Jazz Pharmaceuticals Information security stack
• Create and maintain detailed professional engineering and operation documentation
• Mentor members Security Engineering and Operation Teams to support the network and security infrastructure
• Work in conjunction with security stakeholders in IT and other areas of business to help lead initiatives to maintain a strong security posture that supports business objectives
• Direct the deployment and/or upgrade of security technologies and program enhancements where needed
• Assess and evaluate Cyber threats, vulnerabilities, and other risks
• Monitor external event sources for emerging threats and attack scenarios and influence/assist the Architects/Engineers and other broader IT team members to implement controls to counter those threats and attack scenarios
• Detailed analysis and strong understanding of the attack vectors, attack surfaces and detection avoidance tactics
• Establish and maintain excellent working relationships/partnerships with the broader IT organization and business units
• Monitor incoming event queues for potential security incidents, identify and act on anomalous activity
• Continuously improve security posture across the technology stack including endpoints, network, applications, and servers
• Drive automation and orchestration to improve efficiency and effectiveness of security monitoring and response processes
• Act as a trusted security advisor to support other Jazz IS efforts by providing hands-on security consulting during design, development, implementation, and testing of solutions for integrating new security technologies as needed

Requirements:

• 5+ years of experience in security operations, orchestration, incident response, threat detection, and vulnerability management
• Strong experience with SIEM platforms (e.g., Splunk, Gurucul) for log analysis, alert correlation, and dashboard creation
• Develop and maintain SIEM infrastructure, data ingestion, performance optimization and support lifecycle
• Experience performing security incident investigations and forensic analysis
• Familiar with common attack techniques, tactics, and procedures (TTPs) and frameworks like MITRE ATT&CK
• Hands-on technical expertise in at least two of the following areas: Cloud Security, Identity and Access Management, Network Security, Email Security, DLP
• Strong working knowledge of endpoint detection and response (EDR) tools (e.g., CrowdStrike) and their capabilities
• Hands-on experience with AWS and Google Cloud Platform
• Proven experience in developing and implementing security automation using scripting languages (e.g., Python, PowerShell, BASH) or orchestration workflows
• Experience working in environments composed primarily of SaaS and cloud resources such as Salesforce, Snowflake
• Solid knowledge of operating system artifacts for Windows/Linux/Unix systems
• Must be well organized and disciplined to follow security and compliance standards
• Familiar with regulatory requirements such as GDPR, PII, PHI, and GXP
• Excellent written and verbal communication skills; ability to convey security concepts to non-technical audiences (e.g. senior and executive management, internal customers)
• Ability to establish priorities, work independently and proceed with objectives
• Demonstrated experience leading security project through influence, collaboration, and coalition-building, and very comfortable in ambiguous and high-pressure situations
• Demonstrated vendor relationship management skills, with the ability to build strong rapport
• Must be flexible to work in the US/EST or US/PST time zone
• Must be flexible to work after-hour or on an on-call basis to support operational and project activities
• At least 7 years of relevant IT Security experience and two or more relevant certifications (i.e. CISSP, CISM, CEH, GCIH, GPEN, GWAPT etc)
• Expert experience in popular security controls: AWS security, Azure, Web Proxy, IAM/SSO, Active Directory, Network Security, PAM, App Control, Endpoint Security, DLP, PKI, Key management, Salesforce Shield, Security Automation and Orchestration