Senior Manager, Security Engineering and Operations

Job Responsibilities and Requirements:

• Plan, Design, Implement, and support existing and new Jazz Pharmaceuticals Information security stack.

• Create and maintain detailed professional engineering and operation documentation.

• Mentor members Security Engineering and Operation Teams to support the network and security infrastructure.

• Work in conjunction with security stakeholders in IT and other areas of business to help lead initiatives to maintain a strong security posture that supports business objectives.

• Direct the deployment and/or upgrade of security technologies and program enhancements where needed.

• Assess and evaluate Cyber threats, vulnerabilities, and other risks.

• Monitor external event sources for emerging threats and attack scenarios and influence/assist the Architects/Engineers and other broader IT team members to implement controls to counter those threats and attack scenarios.

• Detailed analysis and strong understanding of the attack vectors, attack surfaces and detection avoidance tactics

• Establish and maintain excellent working relationships/partnerships with the broader IT organization and business units

• Monitor incoming event queues for potential security incidents, identify and act on anomalous activity

• Continuously improve security posture across the technology stack including endpoints, network, applications, and servers.

• Drive automation and orchestration to improve efficiency and effectiveness of security monitoring and response processes.

• Act as a trusted security advisor to support other Jazz IS efforts by providing hands-on security consulting during design, development, implementation, and testing of solutions for integrating new security technologies as needed.

Qualifications:

• 5+ years of experience in security operations, orchestration, incident response, threat detection, and vulnerability management.

• Strong experience with SIEM platforms (e.g., Splunk, Gurucul) for log analysis, alert correlation, and dashboard creation.

• Develop and maintain SIEM infrastructure, data ingestion, performance optimization and support lifecycle.

• Experience performing security incident investigations and forensic analysis.

• Familiar with common attack techniques, tactics, and procedures (TTPs) and frameworks like MITRE ATT&CK.

• Hands-on technical expertise in at least two of the following areas:
  Cloud Security, Identity and Access Management, Network Security, Email Security, DLP

• Strong working knowledge of endpoint detection and response (EDR) tools (e.g., Crowd Strike) and their capabilities.

• Hands-on experience with AWS and Google Cloud Platform.

• Proven experience in developing and implementing security automation using scripting languages (e.g., Python, Power Shell, BASH) or orchestration workflows.

• Experience working in environments composed primarily of SaaS and cloud resources such as Salesforce, Snowflake.

• Solid knowledge of operating system artifacts for Windows/Linux/Unix systems.

• Must be well organized and disciplined to follow security and compliance standards.

• Familiar with regulatory requirements such as GDPR, PII, PHI, and GXP.

• Excellent written and verbal communication skills; ability to convey security concepts to non-technical audiences (e.g. senior and executive management, internal customers)

• Ability to establish priorities, work independently and proceed with objectives.

• Demonstrated experience leading security project through influence, collaboration, and coalition-building, and very comfortable in ambiguous and high‑pressure situations.

• Demonstrated vendor relationship management skills, with the ability to build strong rapport.

• Must be flexible to work in the US/EST or US/PST time zone.

• Must be flexible to work after‑hour or on an on‑call basis to support operational and project activities

Additional Valuable Skills and

Certifications:

• At least 7 years of relevant IT Security experience and two or more relevant certifications (i.e. CISSP, CISM, CEH, GCIH, GPEN, GWAPT etc)

• Expert experience in popular security controls: AWS security, Azure, Web Proxy, IAM/SSO, Active Directory, Network Security, PAM, App Control, Endpoint Security, DLP, PKI, Key management, Salesforce Shield, Security Automation and Orchestration

#LI-Remote