Jazz Pharmaceuticals is a global biopharma company whose purpose is to innovate to transform the lives of patients and their families. We are dedicated to developing life-changing medicines for people with serious diseases — often with limited or no therapeutic options.Jazz is headquartered land with research and development laboratories, manufacturing facilities and employees in multiple countries committed to serving patients worldwide. Please visit www.jazzpharmaceuticals.com for more information.Job Responsibilities and Requirements:Plan, Design, Implement, and support existing and new Jazz Pharmaceuticals Information security stack.Create and maintain detailed professional engineering and operation documentation.Mentor members Security Engineering and Operation Teams to support the network and security infrastructure.Work in conjunction with security stakeholders in IT and other areas of business to help lead initiatives to maintain a strong security posture that supports business objectives.Direct the deployment and/or upgrade of security technologies and program enhancements where needed.Assess and evaluate Cyber threats, vulnerabilities, and other risks.Monitor external event sources for emerging threats and attack scenarios and influence/assist the Architects/Engineers and other broader IT team members to implement controls to counter those threats and attack scenarios.Detailed analysis and strong understanding of the attack vectors, attack surfaces and detection avoidance tacticsEstablish and maintain excellent working relationships/partnerships with the broader IT organization and business unitsMonitor incoming event queues for potential security incidents, identify and act on anomalous activityContinuously improve security posture across the technology stack including endpoints, network, applications, and servers.Drive automation and orchestration to improve efficiency and effectiveness of security monitoring and response processes.Act as a trusted security advisor to support other Jazz IS efforts by providing hands-on security consulting during design, development, implementation, and testing of solutions for integrating new security technologies as needed.Qualifications:5+ years of experience hestration, incident response, threat detection, and vulnerability management.Strong experience with SIEM platforms (e.g., Splunk, Gurucul) for log analysis, alert correlation, and dashboard creation.Develop and maintaa ingestion, performance optimization and support lifecycle.Experience performing security incident investigations and forensic analysis.Familiar with common attack techniques, tactics, and procedures (TTPs) and frameworks like MITRE ATT&CK.Hands-on technical expertise in at least two of the following areas: Cloud Security, Identity and Access Management, Network Security, Email Security, DLPStrong working knowledge of endpoint detection and response (EDR) tools (e.g., CrowdStrike) and their capabilities.Hands-on experience with AWS and Google Cloud Platform.Proven experience in developing and implementing security automation using scripting languages (e.g., Python, PowerShell, BASH) or orchestration workflows.Experience working wflake.Solid knowledge of operating system artifacts for Windows/Linux/Unix systems.Must be well organized and disciplined to follow security and compliance standards.Familiar with regulatory requirements such as GDPR, PII, PHI, and GXP.Excellent written and verbal communication skills; ability to convey security concepts to non-technical audiences (e.g. senior and executive management, internal customers)Ability to establish priorities, work independently and proceed with objectives.Demonstrated experience leading security project through influence, collaboration, and coalition-building, and very comfortable in ambiguous and high-pressure situations.Demonstrated vendor relationship management skills, with the ability to build strong rapport.Must be flexible to work in the US/EST or US/PST time zone.Must be flexible to work after-hour or on an on-call basis to support operational and project activitiesAdditional Valuable Skills and Certifications:At least 7 years of relevant IT Security experience and two or more relevant certifications (i.e. CISSP, CISM, CEH, GCIH, GPEN, GWAPT etc)Expert experience in popular security controls: AWS security, Azure, Web Proxy, IAM/SSO, Active Directory, Network Security, PAM, App Control, Endpoint Security, DLP, PKI, Key management, Salesforce Shield, Security Automation and OrchestrationAt Jazz, your base pay is only one part of your total compensation package. The successful candidate may also be eligible for a discretionary annual cash bonus or incentive compensation (depending on the role), in accordance with the terms of the Company's Global Cash Bonus Plan or Incentive Compensation Plan, as well as discretionary equity grants in accordance with Jazz's Long Term Equity Incentive Plan.The successful candidate will also be eligible to participate luding, but not limited to, medical, dental and vision insurance, 401k retirement savings plan, and flexible paid vacation. For more information on our Benefits offerings : https://careers.jazzpharma.com/benefits.html.
4 days ago