Information Security Operations Analyst

Legend Biotech US; New Jersey; On-site; USD 84,000 - 110,000; Full time

Benefits offered by this job

Medical insurance

401(k) with company match

Paid time off

Job summary

Legend Biotech US is actively seeking an Information Security Operations Analyst to join the IT team in Somerset, NJ. The role focuses on operating, tuning, and monitoring the company’s security technology stack, with duties spanning threat detection, vulnerability management, and incident response.

The ideal candidate has 5+ years in cybersecurity, strong SOC experience, and knowledge of security frameworks. Comprehensive benefits and a competitive compensation package are provided.

Qualifications

• Bachelor’s or postgraduate degree in Computer Science, Engineering or related field.
• Relevant information security certificates encouraged.
• 5+ years of cybersecurity experience with security tools and cloud environments.
• Experience implementing and configuring security tools.
• Hands-on SOC experience with alert triage, investigation, and incident response.

Responsibilities

• Monitor SIEM and alerting platforms; triage and investigate alerts.
• Tune detection rules and ensure platform health with vendors/Infrastructure.
• Run vulnerability scans and track remediation with asset owners.
• Administer secure email gateway, policies, and DLP tuning.
• Investigate risky sign-ins and manage containment (MFA resets).
• Support EDR/XDR, MDM/UEM, and secure web gateway operations.
• Design and report phishing simulations to improve awareness.
• Manage offboarding access and third-party risk controls.
• Maintain SOPs, runbooks, and monthly leadership metrics.
• Support audits, vendor POCs, and IT risk assessments.

Skills

Security monitoring

Incident response

Vulnerability management

Email security

Identity security

Endpoint security

Security awareness

Access control

Documentation

Audits

Education

Baccalaureate or higher in CS/Engineering

Tools

SIEM

EDR/XDR

MDM/UEM

Secure Email Gateway

Job description

Legend Biotech is a global biotechnology company dedicated to treating and, one day, curing life-threatening diseases. Headquartered in Bridgewater, New Jersey, we are advancing the next generation of cell therapy through a portfolio of innovative technologies, including autologous, allogeneic, and in vivo cell therapy approaches. Our research spans chimeric antigen receptor T-cell (CAR-T), T-cell receptor (TCR-T), natural killer (NK) cell-based therapies, and other emerging platforms designed to transform the treatment of serious diseases. From our global network of research and development sites, we are committed to discovering and developing safe, effective, and cutting-edge therapies for patients worldwide.

Legend Biotech entered into a global collaboration agreement with Johnson & Johnson to jointly develop and commercialize CARVYKTI® (ciltacabtagene autoleucel; cilta-cel). Through this strategic partnership, we combine complementary expertise and capabilities to advance innovative immunotherapies for patients living with multiple myeloma.

Legend Biotech is seeking an Information Security Operations Analyst as part of the Information Technology team based in Somerset, NJ.

Role Overview

The Information Security Operations Analyst is a key member of the Information Security Office, responsible for operating, tuning, and monitoring the company’s security technology stack. The Analyst detects, triages, contains, and reports on security events; manages vulnerability, email, endpoint, network, and identity security controls; delivers the phishing simulation and awareness program; and produces operational security metrics in alignment with security frameworks and regulatory requirements.

Key Responsibilities

• Security monitoring & response: Monitor SIEM and alerting platforms; triage, investigate, and elevate alerts; support incident investigations, root cause analysis, and incident reporting.
• Detection tuning & platform health: Tune detection rules, risk scoring, and log sources; maintain collectors, integrations, certificates, and upgrades with vendors and Infrastructure.
• Vulnerability management:Run on-demand and scheduled scans for new servers, software, and changes; report results and track remediation with asset owners.
• Email security:Administer the secure email gateway, including quarantine, sender and policy rules, threat alert triage, and email DLP tuning.
• Identity threat response: Investigate risky sign-ins and suspicious MFA/device registrations; perform containment (session revocation, MFA reset, device removal).
• Endpoint, network & cloud security: Support EDR/XDR, MDM/UEM, secure web gateway, and ZTNA operations, including compliance reviews and policy rollouts.
• Security awareness:Design, run, and report on phishing simulations; align content with awareness events and support end-user training.
• Access & third-party risk: Remove privileged and security-tool access during offboarding; identify unapproved software and route requests through TPRM.
• Documentation & reporting:Maintain SOPs, KB articles, runbooks, monthly operations reports, and leadership metrics.
• Projects, audit & improvement:Support vendor POCs, new security implementations, internal/external audits, annual IT risk assessments, and program enhancements.
• Decision Making: Independently triages alerts, determines escalation to the Incident Response Manager, and executes first-line containment within established procedures. Recommends tuning, policy changes, and remediation priorities to the Global Manager, Network Security Operations; broader-impact changes follow change management.

Requirements

• Baccalaureate Degree or Post-graduate from an accredited university in Computer Science, Engineering or related field of study.
• Related certificates in Information Security.
• Five plus years’ experience in cybersecurity, utilizing security tools and cloud environment experience
• Experience with implementing and configuring security tools
• Experience with testing and evaluating security products
• Hands-on SOC experience, including alert triage, investigation, and incident response support
• Working knowledge of IT-related and compliance mandates (e.g. Sarbanes Oxley, HIPAA, GDPR, CCPA, PCI DSS, FDA) is desired
• Working knowledge of security frameworks and standards (NIST, ISO, CIS, COBIT)
• Excellent analytical and technical skills
• Professional planning and organizational skills, including presentation and strong written communication
• Ability to communicate technical information in understandable business terms
• Great interpersonal skills, including teamwork, facilitation and negotiating skills
• Ability to positively influence the behavior of peers and build relationships with other teams without direct authority over those teams
• Security operations: SIEM, vulnerability scanning, secure email gateway, EDR/XDR, MDM/UEM
• Network & identity: SWG/ZTNA, directory and cloud identity, SSO, SAML, MFA, conditional access, PAM/PIM
• Other: DLP concepts, ITSM ticketing; scripting (e.g., PowerShell) a plus

#Li-LB1

#Li-Hybrid

The base pay range below is what Legend Biotech USA Inc. reasonably expects to offer at the time of posting. Actual compensation may vary based on experience, skills, qualifications, and geographic location. The company reserves the right to modify this range as needed and in accordance with applicable laws.

Other Types of Pay: Performance-based bonus and/or equity is available to employees in eligible roles.

Benefits and Paid Time Off: Medical, dental, and vision insurance as well as a 401(k) retirement plan with a company match that vests fully on day one. We offer eight (8) weeks of paid parental leave after just three (3) months of employment, and a paid time off policy that includes vacation time, personal time, sick time, floating holidays, and eleven (11) company holidays. Additional voluntary benefits include flexible spending and health savings accounts, life and AD&D insurance, short- and long-term disability coverage, legal assistance, and supplemental plans such as pet, critical illness, accident, and hospital indemnity insurance. We also provide voluntary commuter benefits, family planning and care resources, well-being initiatives, and peer-to-peer recognition programs; demonstrating our ongoing commitment to building a culture where our people feel empowered, supported, and inspired to do their best work.

Pay Range (Base Pay):

$83,711 - $109,870 USD

Please note: These benefits are offered exclusively to permanent full-time employees. Contractors are not eligible for benefits through Legend Biotech.

Applicants must be authorized to work in the United States. As part of our commitment to maintaining a lawful workforce and ensuring compliance with federal employment regulations, we participate in the E-Verify program. If you are selected for employment, you will be required to complete the Form I-9 process, and your employment eligibility will be verified through E-Verify in accordance with applicable federal law. We are committed to providing a fair, transparent, and welcoming hiring experience for all candidates.

EEO Statement

It is the policy of Legend Biotech to provide equal employment opportunities without regard to actual or perceived race, color, creed, religion, national origin, ancestry, citizenship status, age, sex or gender (including pregnancy, childbirth, related medical conditions and lactation), gender identity or gender expression (including transgender status), sexual orientation, marital status, military service and veteran status, disability, genetic information, or any other protected characteristic under applicable federal, state or local laws or ordinances.

Employment is at-will and may be terminated at any time with or without cause or notice by the employee or the company.

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey.Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.

As set forth in Legend Biotech US’s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection.As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:

A \"disabled veteran\" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A \"recently separated veteran\" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An \"active duty wartime or campaign badge veteran\" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An \"Armed forces service medal veteran\" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.