[Hiring] Senior Principal Information Security Analyst @Regeneron Pharmaceuticals

Role Description

We’re looking for a hands-on leader to own the platforms that give our security teams visibility across the enterprise. You’ll lead a team supporting the Security Monitoring function, which includes:

• Building and maintaining the Splunk log ingestion pipeline, RBAC, searches, reporting, and dashboards.
• Supporting the systems that feed our Security Information and Event Management (SIEM) platform.

This is a player-coach role, roughly 50/50 technical work and team leadership. Responsibilities include:

• Leading a mixed team of employees and vendor staff.
• Acting as the escalation point for monitoring platforms or security incidents.
• Explaining complex technical topics clearly to non-technical stakeholders.

At Regeneron, our SIEM has grown tremendously, supporting business functions beyond security, including Finance, IT, Manufacturing, and Research.

Location: 100% remote (US East Coast time zone).

Team: 4-10 employees and vendor resources.

Qualifications

• 10+ years in IT, including 5+ years in security operations or as a monitoring system manager or lead engineer.
• 5+ years leading or directing technical teams, including contractor staff.
• Expert-level Splunk experience; Splunk Certified Consultant or equivalent demonstrated expertise.
• Advanced Red Hat Linux skills.
• Advanced scripting in Python and Bash.
• Advanced rsyslog configuration experience.
• Experience writing technical requirements and working with engineering teams to deliver them.
• Strong written and verbal communication skills.
• Sound judgment in weighing security controls against technical and administrative standards.

Requirements

• Own the availability, performance, and data quality of the SIEM and log collection infrastructure.
• Drive the team and platform toward zero skipped searches, zero unplanned downtime, and no logging errors.
• Forecast data growth and manage ingest and compute within licensed capacity.
• Provide metrics, performance reports, and dashboards to leadership.
• Apply ITIL practices to incident, request, and change management.
• Manage vendor relationships and contracts, including SLA definition and performance reviews.
• Direct a mixed team of employees and external resources.
• Lead responses to audit requests related to monitoring systems and controls.
• Escalate incidents and enhancement requests to internal owners and vendors.
• Coordinate with stakeholders during cybersecurity incidents.
• Support triage and escalation of security events and threats.
• Partner with engineering and architecture teams to define requirements and set feasible timelines.
• Deliver projects that improve security event collection, detection, analysis, correlation, and response.
• Advise infrastructure and security teams on configuration changes that improve event collection.
• Track emerging trends in AI, machine learning, and analytics for security monitoring.
• Align the team with common short- and long-term goals.
• Ensure the team has the tools it needs and remove blockers.
• Provide frequent performance feedback to team members.
• Build a trusting environment where it’s safe to ask for support and suggest improvements.

Benefits

• Competitive and comprehensive total rewards package.
• Annual bonuses or other incentive plans.
• Equity awards.
• Pension or retirement benefits.
• 401(k) company match.
• Health and wellness programs.
• Insurance benefits (e.g. medical, dental, vision, life and disability).
• Paid time off.
• Family support benefits.