Senior Manager, Security Engineering and Operations

This is a fully remote position, open to applicants in California, +1 more state.

📋 Description

• Strategically plan, design, implement, and support the information security framework at Jazz Pharmaceuticals.

• Develop and sustain comprehensive engineering and operations documentation.

• Provide mentorship to members of the Security Engineering and Operations teams.

• Spearhead initiatives with IT security stakeholders and business units to uphold a robust security posture.

• Oversee the deployment and upgrades of security technologies and enhancements to programs.

• Evaluate cyber threats, vulnerabilities, and associated risks.

• Keep track of external event sources for emerging threats and attack scenarios, and assist in implementing necessary controls.

• Examine attack vectors, attack surfaces, and tactics to avoid detection.

• Monitor incoming event queues for potential security incidents and respond to any irregular activities.

• Persistently enhance security across endpoints, networks, applications, and servers.

• Propel automation and orchestration for security monitoring and incident response.

• Offer hands-on security consulting during solution design, development, implementation, and testing phases.

• Build collaborative relationships with the wider IT organization and business units.

• Manage vendor relationships and support operational and project-related activities.

⛳️ Requirements

• Over 5 years of experience in security operations, orchestration, incident response, threat detection, and vulnerability management.

• Extensive experience with SIEM platforms like Splunk or Gurucul.

• Proven experience in developing and maintaining SIEM infrastructure, data ingestion, performance optimization, and lifecycle support.

• Experience conducting security incident investigations and forensic analyses.

• Familiarity with common attack techniques, tactics, and procedures (TTPs) and frameworks such as MITRE ATT&CK.

• Practical technical expertise in at least two areas: Cloud Security, Identity and Access Management, Network Security, Email Security, and DLP.

• Solid working knowledge of EDR tools such as CrowdStrike.

• Hands-on experience with AWS and Google Cloud Platform.

• Experience in developing and implementing security automation using Python, PowerShell, BASH, or orchestration workflows.

• Familiarity with SaaS and cloud environments like Salesforce and Snowflake.

• Knowledge of artifacts from Windows, Linux, and Unix operating systems.

• Capability to adhere to security and compliance standards.

• Understanding of GDPR, PII, PHI, and GXP requirements.

• Exceptional written and verbal communication skills.

• Ability to explain security concepts to non-technical audiences.

• Competence to establish priorities, work autonomously, and pursue objectives.

• Proven experience leading security projects through influence, collaboration, and coalition-building.

• Comfort in ambiguous and high-pressure environments.

• Demonstrated skills in managing vendor relationships.

• Availability to work in US/EST or US/PST time zones.

• Willingness to work after hours or be on-call.

• Additional valuable qualifications include over 7 years of relevant IT Security experience and two or more certifications such as CISSP, CISM, CEH, GCIH, GPEN, or GWAPT.

• Expert knowledge of security controls including AWS security, Azure, Web Proxy, IAM/SSO, Active Directory, Network Security, PAM, Application Control, Endpoint Security, DLP, PKI, Key Management, Salesforce Shield, and Security Automation and Orchestration.

🏝️ Benefits

• Discretionary annual cash bonus or incentive compensation.

• Discretionary equity grants.

• Medical insurance.

• Dental insurance.

• Vision insurance.

• 401k retirement savings plan.

• Flexible paid vacation.