Associate Director, AI-Driven Threat Detection & Response

(FCRS = US014) Novartis Pharmaceuticals Corporation; Barcelona; Hybrid; EUR 58,000 - 108,000; Full time

Benefits offered by this job

Insurance plans

Retirement plans

Wellbeing resources

Global recognition programs

Flexible and hybrid working options

14 weeks paid parental leave

Job summary

Novartis Pharmaceuticals Corporation in Barcelona is seeking a Detection and Response Associate Director to lead strategic security operations within the CSOC, shaping global threat detection, investigation, and incident response with AI-enabled innovation.

This role combines deep technical expertise with strategic influence, directing advanced security monitoring, threat intelligence, and cross-functional initiatives across the enterprise, while advancing security automation and collaboration

Qualifications

• 8+ years of cybersecurity experience, including 5+ years in Security Operations, Threat Detection, Incident Response and Threat Hunting.
• Proven experience leading complex security investigations in large enterprises.
• Hands-on with SIEM/EDR/XDR and security telemetry across cloud environments.

Responsibilities

• Shape global TDR strategy and drive advanced cyber defense capabilities.
• Lead investigations, containment, and remediation for complex incidents.
• Drive AI adoption and automation across detection and response workflows.
• Oversee monitoring, threat detection, and triage across the IT ecosystem.
• Mentor teams and influence security practices across regions.

Skills

SIEM

EDR/XDR

Incident Response

Threat Hunting

MITRE ATT&CK

Automation

KQL/SPL/Python

Cloud security

Education

Bachelor's degree or equivalent

Tools

Microsoft Sentinel

Microsoft Defender

Splunk

KQL

Job description

Novartis Pharmaceuticals Corporation in Barcelona is seeking a Detection and Response Associate Director to lead strategic security operations within the CSOC, shaping global threat detection, investigation, and incident response with AI-enabled innovation.

This role combines deep technical expertise with strategic influence, directing advanced security monitoring, threat intelligence, and cross-functional initiatives across the enterprise, while advancing security automation and collaboration