Principal, Threat Detection & Response

jj; Bengaluru; On-site; INR 3,000,000 - 6,000,000; Full time

Job summary

Johnson & Johnson in Bengaluru, India seeks a Principal, Threat Detection & Response to join Cyber Defense Operations. The role requires deep cybersecurity knowledge, extensive incident response experience, and the ability to drive strategic initiatives in a fast-paced environment.

The candidate will monitor threats, lead response efforts, conduct forensics, and collaborate with legal, compliance and executive teams to strengthen security postures across the enterprise.

Qualifications

• We require 6+ years in digital forensics and incident response.
• Strong knowledge of security frameworks and compliance standards.
• Proficiency in Python and security policy development.

Responsibilities

• Monitor security alerts, logs, and threat intelligence feeds.
• Lead incident response efforts and containment plans.
• Conduct digital forensics investigations and preserve evidence.
• Mentor team members and drive continuous improvement.
• Prepare incident reports and present findings to leadership.
• Coordinate with legal, compliance and executives on security efforts.
• Participate in on-call rotations to handle major security incidents.

Skills

Digital forensics

Incident response

Threat detection

Python

Security frameworks

Project management

Executive briefing

Policy & governance

Education

BA/BS or equivalent experience

Tools

Forensics tools

Incident response tools

Job description

At Johnson & Johnson,we believe health is everything. Our strength in healthcare innovation empowers us to build aworld where complex diseases are prevented, treated, and cured,where treatments are smarter and less invasive, andsolutions are personal.Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity.Learn more at jnj.com.

As guided by Our Credo, Johnson & Johnson is responsible to our employees who work with us throughout the world. We provide an inclusive work environment where each person is considered as an individual. At Johnson & Johnson, we respect the diversity and dignity of our employees and recognize their merit.

Job Function:

Technology Enterprise Strategy & Security

Security & Controls

Job Category:

Scientific/Technology

All Job Posting Locations:

Bangalore, Karnataka, India

Job Description:

We are seeking a dynamic and experienced Principal, Threat Detection & Response to join our Cyber Defense Operations teams. The ideal candidate will possess a deep understanding of cybersecurity principles, extensive experience in incident response technologies and procedures, and the ability to drive strategic initiatives in a fast-paced environment.

Key Responsibilities

Threat Monitoring, Forensics, and Incident Response

• Continuously monitor security alerts, logs, and threat intelligence feeds.
• Conduct digital forensics investigations, preserve evidence, and analyze incidents.
• Lead incident response efforts, develop response plans, and contain threats.
• Create detailed incident findings and reports, and present them to leadership.
• Mentor and develop team members, fostering a culture of innovation and continuous improvement.
• Participate in regular on-call rotation to monitor, triage, and respond to major security incidents

Threat Intelligence Research

• Stay updated on the latest threat intelligence and attack techniques.
• Collaborate with IT and backend teams to implement security controls and investigate backend issues.
• Conduct proactive threat hunting to identify hidden threats.

Tool Evaluation & Selection:

• Evaluate and recommend cybersecurity tools and technologies that enhance incident detection and response capabilities.
• Maintain up-to-date knowledge of industry trends and emerging technologies in cybersecurity automation.

Risk Management:

• Work closely with legal, compliance, and executive teams to coordinate security efforts.
• Develop, update, and enforce security policies and procedures.
• Prepare and present incident reports, threat assessments, and strategic recommendations.
• Identify potential risks and gaps in systems and processes to implement solutions to mitigate them.
• Conduct regular assessments and audits of response tools and procedures to ensure effectiveness and compliance with industry standards.

Reporting & Metrics:

• Establish key performance indicators (KPIs) to measure the effectiveness of incident response services
• Prepare and present regular reports to senior management on the status and strategic impact of incident response services.

Required Minimum Education: BA/BS or equivalent experience

Required Years of Related Experience: 6 years’ experience in digital forensics and incident response

Required Knowledge, Skills and Abilities:

• A minimum of 6 years of digital forensics and incident response experience
• Experienced IT and/or network administration
• Strong understanding of security frameworks, compliance standards, and best practices (e.g., NIST, ISO, CIS)
• Strong proficiency in python or similar
• Experience in managing projects related to cyber defense tools and services
• Familiarity with threat detection and incident response methodologies
• Excellent executive intelligence writing and briefing skills

Johnson & Johnson is an Affimative Action and Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, or protected veteran status and will not be discriminated against on the basis of disability.

Required Skills:

Preferred Skills:

• Business Process Design
• Crisis Management
• Critical Thinking
• Information Security Auditing
• Information Security Management System (ISMS)
• Information Technology (IT) Security Assessments
• Information Technology Strategies
• Mentorship
• Organizing
• Presentation Design
• Process Optimization
• Root Cause Analysis (RCA)
• Security Architecture Design
• Security Policies
• Technical Credibility
• Vulnerability Management