Principal, Threat Detection & Response

Johnson Johnson; Bengaluru; Presencial; INR 2 500 000 - 4 000 000; Tempo integral

Resumo da oferta

Johnson & Johnson is seeking a highly experienced Principal, Threat Detection & Response to join our Cyber Defense Operations team in a fast-paced, global environment. You will drive incident response strategies, lead investigations, and mentor a team of security professionals across Threat Monitoring, Intelligence, and Tool Evaluation.

Ideal candidates bring 6+ years in digital forensics and incident response, deep knowledge of security frameworks, and strong skills in Python.

Qualificações

• BA/BS or equivalent experience.
• 6 years’ experience in digital forensics and incident response.
• Strong knowledge of security frameworks (NIST, ISO, CIS).
• Proficient in Python or similar language.
• Experience in managing cyber defense projects.
• Ability to write and brief executives clearly.

Responsabilidades

• Threat Monitoring, Forensics, and Incident Response: Continuously monitor security alerts, logs, and threat intelligence feeds; Lead incident response efforts and develop response plans; Mentor and develop team members; participate in on-call rotation.
• Threat Intelligence Research: Stay updated on threat intelligence and attack techniques; Collaborate with IT and backend teams to implement security controls and investigate backend issues; Conduct proactive threat hunting.
• Tool Evaluation & Selection: Evaluate cybersecurity tools and technologies to enhance incident detection and response; Maintain knowledge of industry trends.
• Risk Management: Coordinate security efforts with legal/compliance/executive teams; develop, update and enforce security policies; present incident reports and risk assessments.
• Reporting & Metrics: Establish KPIs; report to senior management on status and strategic impact of incident response services.

Conhecimentos

Digital forensics

Incident response

Threat detection

Python

Project management

Security frameworks

Executive briefing

Formação académica

BA/BS or equivalent experience

Ferramentas

Forensic tools

Incident response tools

Descrição da oferta de emprego

At Johnson & Johnson,we believe health is everything. Our strength in healthcare innovation empowers us to build aworld where complex diseases are prevented, treated, and cured,where treatments are smarter and less invasive, andsolutions are personal.Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity.Learn more at jnj.com.

As guided by Our Credo, Johnson & Johnson is responsible to our employees who work with us throughout the world. We provide an inclusive work environment where each person is considered as an individual. At Johnson & Johnson, we respect the diversity and dignity of our employees and recognize their merit.

Job Function

Technology Enterprise Strategy & Security

Job Sub Function

Security & Controls

Job Category

Scientific/Technology

All Job Posting Locations

Bangalore, Karnataka, India

Job Description

We are seeking a dynamic and experienced Principal, Threat Detection & Response to join our Cyber Defense Operations teams. The ideal candidate will possess a deep understanding of cybersecurity principles, extensive experience in incident response technologies and procedures, and the ability to drive strategic initiatives in a fast-paced environment.

Key Responsibilities

Threat Monitoring, Forensics, and Incident Response

• Continuously monitor security alerts, logs, and threat intelligence feeds.
• Conduct digital forensics investigations, preserve evidence, and analyze incidents.
• Lead incident response efforts, develop response plans, and contain threats.
• Create detailed incident findings and reports, and present them to leadership.
• Mentor and develop team members, fostering a culture of innovation and continuous improvement.
• Participate in regular on-call rotation to monitor, triage, and respond to major security incidents

Threat Intelligence Research

• Stay updated on the latest threat intelligence and attack techniques.
• Collaborate with IT and backend teams to implement security controls and investigate backend issues.
• Conduct proactive threat hunting to identify hidden threats.

Tool Evaluation & Selection

• Evaluate and recommend cybersecurity tools and technologies that enhance incident detection and response capabilities.
• Maintain up-to-date knowledge of industry trends and emerging technologies in cybersecurity automation.

Risk Management

• Work closely with legal, compliance, and executive teams to coordinate security efforts.
• Develop, update, and enforce security policies and procedures.
• Prepare and present incident reports, threat assessments, and strategic recommendations.
• Identify potential risks and gaps in systems and processes to implement solutions to mitigate them.
• Conduct regular assessments and audits of response tools and procedures to ensure effectiveness and compliance with industry standards.

Reporting & Metrics

• Establish key performance indicators (KPIs) to measure the effectiveness of incident response services
• Prepare and present regular reports to senior management on the status and strategic impact of incident response services.

Required Minimum Education

BA/BS or equivalent experience

Required Years of Related Experience

6 years’ experience in digital forensics and incident response

Required Knowledge, Skills And Abilities

• A minimum of 6 years of digital forensics and incident response experience
• Experienced IT and/or network administration
• Strong understanding of security frameworks, compliance standards, and best practices (e.g., NIST, ISO, CIS)
• Strong proficiency in python or similar
• Experience in managing projects related to cyber defense tools and services
• Familiarity with threat detection and incident response methodologies
• Excellent executive intelligence writing and briefing skills

Johnson & Johnson is an Affiliated Action and Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, or protected veteran status and will not be discriminated against on the basis of disability.

Preferred Skills

Business Process Design, Crisis Management, Critical Thinking, Information Security Auditing, Information Security Management System (ISMS), Information Technology (IT) Security Assessments, Information Technology Strategies, Mentorship, Organizing, Presentation Design, Process Optimization, Root Cause Analysis (RCA), Security Architecture Design, Security Policies, Technical Credibility, Vulnerability Management