Principal, Threat Detection & Response

8080-Johnson & Johnson Private Limited Legal Entity; Bengaluru; In loco; INR 2.200.000 - 4.200.000; Tempo pieno

Descrizione del lavoro

Johnson & Johnson in Bengaluru seeks a seasoned Cybersecurity Incident Response Lead to monitor threats, perform digital forensics, and drive incident containment and recovery across enterprise systems.

The ideal candidate has 6+ years in digital forensics and IR, deep knowledge of security frameworks (NIST/ISO/CIS), and hands-on experience with security tooling and governance.

Competenze

• Experience in digital forensics and incident response (minimum 6 years).
• IT and/or network administration experience.
• Strong knowledge of security frameworks and compliance standards (NIST/ISO/CIS).
• Proficiency in Python or similar language.
• Experience managing projects related to cyber defense tools and services.
• Familiarity with threat detection and incident response methodologies.
• Excellent briefing and technical writing skills.

Mansioni

• Monitor security alerts, logs, and threat intel; conduct forensics investigations and incident analysis.
• Lead incident response, develop response plans, and contain threats; present findings to leadership.
• Mentor team members and participate in on-call rotation for major security incidents.
• Research threat intelligence and collaborate with IT to implement security controls.
• Evaluate cybersecurity tools and technologies and stay updated on trends and automation.
• Coordinate with legal/compliance and executives; develop security policies and risk mitigation plans.
• Prepare incident reports and strategic recommendations; measure KPIs for incident response.

Conoscenze

Digital forensics

Incident response

Python

Project management

Security governance

Formazione

BA/BS or equivalent experience

Descrizione del lavoro

At Johnson & Johnson, we believe health is everything. Our strength in healthcare innovation empowers us to build a world where complex diseases are prevented, treated, and cured, where treatments are smarter and less invasive, and solutions are personal. Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity. Learn more at jnj.com. As guided by Our Credo, Johnson & Johnson is responsible to our employees who work with us throughout the world. We provide an inclusive work environment where each person is considered as an individual. At Johnson & Johnson, we respect the diversity and dignity of our employees and recognize their merit.

Job Information

Job Function: Technology Enterprise Strategy & Security

Job Sub Function: Security & Controls

Job Category: Scientific/Technology

All Job Posting Locations: Bangalore, Karnataka, India

Key Responsibilities

• Threat Monitoring, Forensics, and Incident Response Continuously monitor security alerts, logs, and threat intelligence feeds. Conduct digital forensics investigations, preserve evidence, and analyze incidents. Lead incident response efforts, develop response plans, and contain threats. Create detailed incident findings and reports, and present them to leadership. Mentor and develop team members, fostering a culture of innovation and continuous improvement. Participate in regular on-call rotation to monitor, triage, and respond to major security incidents.
• Threat Intelligence Research Stay updated on the latest threat intelligence and attack techniques. Collaborate with IT and backend teams to implement security controls and investigate backend issues. Conduct proactive threat hunting to identify hidden threats.
• Tool Evaluation & Selection Evaluate and recommend cybersecurity tools and technologies that enhance incident detection and response capabilities. Maintain up-to-date knowledge of industry trends and emerging technologies in cybersecurity automation.
• Risk Management Work closely with legal, compliance, and executive teams to coordinate security efforts. Develop, update, and enforce security policies and procedures. Prepare and present incident reports, threat assessments, and strategic recommendations. Identify potential risks and gaps in systems and processes to implement solutions to mitigate them. Conduct regular assessments and audits of response tools and procedures to ensure effectiveness and compliance with industry standards.
• Reporting & Metrics Establish key performance indicators (KPIs) to measure the effectiveness of incident response services. Prepare and present regular reports to senior management on the status and strategic impact of incident response services.

Required Minimum Education

BA/BS or equivalent experience

Required Years of Related Experience

6 years’ experience in digital forensics and incident response

Required Knowledge, Skills and Abilities

• Experience in digital forensics and incident response (minimum 6 years)
• Experienced IT and/or network administration
• Strong understanding of security frameworks, compliance standards, and best practices (e.g., NIST, ISO, CIS)
• Strong proficiency in python or similar
• Experience in managing projects related to cyber defense tools and services
• Familiarity with threat detection and incident response methodologies
• Excellent executive intelligence writing and briefing skills

Preferred Skills

• Business Process Design
• Crisis Management
• Critical Thinking
• Information Security Auditing
• Information Security Management System (ISMS)
• Information Technology (IT) Security Assessments
• Information Technology Strategies
• Mentorship
• Organizing
• Presentation Design
• Process Optimization
• Root Cause Analysis (RCA)
• Security Architecture Design
• Security Policies
• Technical Credibility
• Vulnerability Management

Equal Opportunity and Diversity Statement

Johnson & Johnson is an Affimative Action and Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, or protected veteran status and will not be discriminated against on the basis of disability.