[Hiring] Senior Manager, Security Engineering and Operations @Jazz Pharmaceuticals

Role Description

• Plan, Design, Implement, and support existing and new Jazz Pharmaceuticals Information security stack.
• Create and maintain detailed professional engineering and operation documentation.
• Mentor members of Security Engineering and Operation Teams to support the network and security infrastructure.
• Work in conjunction with security stakeholders in IT and other areas of business to help lead initiatives to maintain a strong security posture that supports business objectives.
• Direct the deployment and/or upgrade of security technologies and program enhancements where needed.
• Assess and evaluate Cyber threats, vulnerabilities, and other risks.
• Monitor external event sources for emerging threats and attack scenarios and influence/assist the Architects/Engineers and other broader IT team members to implement controls to counter those threats and attack scenarios.
• Conduct detailed analysis and maintain a strong understanding of the attack vectors, attack surfaces, and detection avoidance tactics.
• Establish and maintain excellent working relationships/partnerships with the broader IT organization and business units.
• Monitor incoming event queues for potential security incidents, identify and act on anomalous activity.
• Continuously improve security posture across the technology stack including endpoints, network, applications, and servers.
• Drive automation and orchestration to improve efficiency and effectiveness of security monitoring and response processes.
• Act as a trusted security advisor to support other Jazz IS efforts by providing hands-on security consulting during design, development, implementation, and testing of solutions for integrating new security technologies as needed.

Qualifications

• 5+ years of experience in security operations, orchestration, incident response, threat detection, and vulnerability management.
• Strong experience with SIEM platforms (e.g., Splunk, Gurucul) for log analysis, alert correlation, and dashboard creation.
• Develop and maintain SIEM infrastructure, data ingestion, performance optimization and support lifecycle.
• Experience performing security incident investigations and forensic analysis.
• Familiar with common attack techniques, tactics, and procedures (TTPs) and frameworks like MITRE ATT&CK.
• Hands-on technical expertise in at least two of the following areas: Cloud Security, Identity and Access Management, Network Security, Email Security, DLP.
• Strong working knowledge of endpoint detection and response (EDR) tools (e.g., CrowdStrike) and their capabilities.
• Hands-on experience with AWS and Google Cloud Platform.
• Proven experience in developing and implementing security automation using scripting languages (e.g., Python, PowerShell, BASH) or orchestration workflows.
• Experience working in environments composed primarily of SaaS and cloud resources such as Salesforce, Snowflake.
• Solid knowledge of operating system artifacts for Windows/Linux/Unix systems.
• Must be well organized and disciplined to follow security and compliance standards.
• Familiar with regulatory requirements such as GDPR, PII, PHI, and GXP.
• Excellent written and verbal communication skills; ability to convey security concepts to non-technical audiences (e.g. senior and executive management, internal customers).
• Ability to establish priorities, work independently and proceed with objectives.
• Demonstrated experience leading security projects through influence, collaboration, and coalition-building, and very comfortable in ambiguous and high-pressure situations.
• Demonstrated vendor relationship management skills, with the ability to build strong rapport.
• Must be flexible to work in the US/EST or US/PST time zone.
• Must be flexible to work after-hour or on an on-call basis to support operational and project activities.

Requirements

• At least 7 years of relevant IT Security experience and two or more relevant certifications (i.e. CISSP, CISM, CEH, GCIH, GPEN, GWAPT etc).
• Expert experience in popular security controls: AWS security, Azure, Web Proxy, IAM/SSO, Active Directory, Network Security, PAM, App Control, Endpoint Security, DLP, PKI, Key management, Salesforce Shield, Security Automation and Orchestration.

Benefits

• Medical, dental, and vision insurance.
• 401k retirement savings plan.
• Flexible paid vacation.
• Discretionary annual cash bonus or incentive compensation (depending on the role).
• Discretionary equity grants in accordance with Jazz’s Long Term Equity Incentive Plan.