Senior Principal Information Security Analyst – Defensive Operations

Job not on LinkedIn

🔥 38 minutes ago

🇺🇸 United States – Remote

💵 $153.5k - $250.5k / year

⏰ Full Time

🟠 Senior

🔐 Security Analyst

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.Why this score:

• Just posted.
• Jobs at this company usually fill in 35 days.

Apply Now

Find Similar Remote Jobs

Regeneron

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1988

🏥 Healthcare

🏭 Manufacturing

🧬 Biotechnology

💰 Post-IPO Equity on 2023-10

Healthcare • Manufacturing • Biotechnology

Regeneron is a biotechnology company dedicated to turning scientific discoveries into life-changing medicines. The company focuses on a range of serious diseases including allergic, cardiovascular, and metabolic diseases, neuroscience, oncology, hematology, ophthalmology, and rare diseases. It achieves this by integrating biology and technology to develop cutting-edge biologics and genetic medicines. Regeneron is committed to health equity, environmental sustainability, and supporting future STEM talent through initiatives like the Regeneron Science Talent Search. By maintaining high ethical standards and corporate responsibility, Regeneron aims to push the boundaries of science for better healthcare solutions.

📋 Description

• Own the availability, performance, and data quality of the SIEM and log collection infrastructure • Lead a team supporting the Security Monitoring function • Build and maintain the Splunk log ingestion pipeline, RBAC, searches, reporting, and dashboards • Support systems that feed the SIEM platform • Lead a mixed team of employees and vendor staff in a player-coach role • Act as the escalation point for monitoring platforms and security incidents • Forecast data growth and manage ingest and compute within licensed capacity • Provide metrics, performance reports, and dashboards to leadership • Apply ITIL practices to incident, request, and change management • Manage vendor relationships and contracts, including SLAs, performance reviews, and service review meetings • Assign work to employees and external resources in line with shared strategy and goals • Lead responses to audit requests related to monitoring systems and controls • Coordinate with stakeholders during cybersecurity incidents • Support triage and escalation of security events and threats using SIEM data • Partner with engineering and architecture teams to define requirements and timelines • Deliver projects improving security event collection, detection, analysis, correlation, and response • Advise infrastructure and security teams on configuration changes that improve event collection • Track emerging AI, machine learning, and analytics trends for security monitoring • Align the team with short- and long-term goals, provide tools, remove blockers, and give performance feedback • Explain complex technical topics to non-technical stakeholders

🎯 Requirements

• 10+ years in IT, including 5+ years in security operations or as a monitoring system manager or lead engineer • 5+ years leading or directing technical teams, including contractor staff • Expert-level Splunk experience; Splunk Certified Consultant or equivalent demonstrated expertise • Advanced Red Hat Linux skills • Advanced scripting in Python and Bash • Advanced rsyslog configuration experience • Experience writing technical requirements and working with engineering teams to deliver them • Strong written and verbal communication, with the ability to build relationships and present to audiences from engineers to executives • Sound judgment in weighing security controls against technical and administrative standards and making risk-appropriate tradeoffs • Experience with Splunk Enterprise Security and SOC operations, including triaging security incidents and threats • Experience overseeing managed service delivery and vendor SLAs • Experience with security telemetry sources such as syslog, Universal Forwarder and heavy forwarder deployments, Splunk DB Connect, and the VMware Data Collection Node • Familiarity with modern detection technologies (EDR/XDR) and cloud security logging • Experience in a large, complex organization working across multiple business lines

🏖️ Benefits

• Annual bonuses or other incentive plans • Equity awards • Pension or retirement benefits • 401(k) company match • Health and wellness programs • Fitness centers • Medical, dental, vision, life, and disability insurance benefits • Paid time off • Family support benefits • Reasonable accommodation during the recruitment process where required • Opportunities to speak at industry conferences

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume