Senior Manager, Security Engineering and Operations

BioSpace; Palo Alto (CA); On-site; USD 146,000 - 220,000; Full time

Benefits offered by this job

Medical, dental & vision insurance

401k retirement savings plan

Flexible paid vacation

Job summary

Jazz Pharmaceuticals is a global biopharma company focused on transforming patient lives through innovative medicines. The team seeks a senior security professional to plan, design, and support the information security stack while mentoring engineers across security domains.

Responsibilities include threat assessment, SIEM management, cloud security, and automation of monitoring and response. Flexibility for US EST/PST hours and after-hours support is required.

Qualifications

• 5+ years of experience in security operations, orchestration, incident response, threat detection, and vulnerability management.
• Strong experience with SIEM platforms (e.g., Splunk, Gurucul) for log analysis, alert correlation, and dashboard creation.
• Develop and maintain SIEM infrastructure, data ingestion, performance optimization and support lifecycle.
• Experience performing security incident investigations and forensic analysis.
• Familiar with MITRE ATT&CK and common attack techniques, tactics, and procedures.
• Hands-on expertise in Cloud Security, IAM, Network Security, Email Security, DLP.
• Strong working knowledge of EDR tools (CrowdStrike).
• Hands-on experience with AWS and Google Cloud Platform.
• Proven experience in security automation using scripting languages or orchestration workflows.
• Experience with SaaS/cloud resources like Salesforce, Snowflake.
• Solid knowledge of OS artifacts for Windows/Linux/Unix.
• Familiar with GDPR, PII, PHI, and GXP requirements.
• Excellent written and verbal communication; capable of conveying security concepts to non-technical audiences.
• Ability to work independently, set priorities, and handle high-pressure projects.
• Demonstrated vendor relationship management and collaboration skills.
• Availability for US EST or PST time zones and after-hours/on-call support.

Responsibilities

• Plan, Design, Implement, and support Jazz Pharmaceuticals Information security stack.
• Create and maintain detailed professional engineering and operation documentation.
• Mentor Security Engineering and Operation Teams to support the network and security infrastructure.
• Lead initiatives with security stakeholders to maintain a strong security posture aligned with business objectives.
• Direct deployment or upgrade of security technologies and program enhancements.
• Assess and evaluate cyber threats, vulnerabilities and risks.
• Monitor external event sources for emerging threats and coordinate countermeasures.
• Analyze attack vectors and detection avoidance tactics to improve defenses.
• Establish relationships with the broader IT organization and business units.
• Monitor event queues for potential incidents and respond to anomalous activity.
• Continuously improve security posture across endpoints, network, apps, and servers.
• Drive automation and orchestration to improve monitoring and response processes.
• Serve as trusted security advisor during design, development, and testing of new solutions.

Skills

Security Operations

Incident Response

Threat Detection

SIEM platforms

Cloud Security

EDR (CrowdStrike)

Scripting (Python/PowerShell/Bash)

Regulatory & Compliance

Vendor relations

Education

CISSP

CISM

CEH

Tools

Splunk

Gurucul

AWS

GCP

CrowdStrike

Salesforce

Job description

Jazz Pharmaceuticals is a global biopharma company whose purpose is to innovate to transform the lives of patients and their families. We are dedicated to developing life-changing medicines for people with serious diseases — often with limited or no therapeutic options. We have a diverse portfolio of marketed medicines, including leading therapies for sleep disorders and epilepsy, and a growing portfolio of cancer treatments. Our patient-focused and science-driven approach powers pioneering research and development advancements across our robust pipeline of innovative therapeutics in oncology and neuroscience. Jazz is headquartered in Dublin, Ireland with research and development laboratories, manufacturing facilities and employees in multiple countries committed to serving patients worldwide. Please visit www.jazzpharmaceuticals.com for more information.

Job Responsibilities And Requirements

• Plan, Design, Implement, and support existing and new Jazz Pharmaceuticals Information security stack.
• Create and maintain detailed professional engineering and operation documentation.
• Mentor members Security Engineering and Operation Teams to support the network and security infrastructure.
• Work in conjunction with security stakeholders in IT and other areas of business to help lead initiatives to maintain a strong security posture that supports business objectives.
• Direct the deployment and/or upgrade of security technologies and program enhancements where needed.
• Assess and evaluate Cyber threats, vulnerabilities, and other risks.
• Monitor external event sources for emerging threats and attack scenarios and influence/assist the Architects/Engineers and other broader IT team members to implement controls to counter those threats and attack scenarios.
• Detailed analysis and strong understanding of the attack vectors, attack surfaces and detection avoidance tactics
• Establish and maintain excellent working relationships/partnerships with the broader IT organization and business units
• Monitor incoming event queues for potential security incidents, identify and act on anomalous activity
• Continuously improve security posture across the technology stack including endpoints, network, applications, and servers.
• Drive automation and orchestration to improve efficiency and effectiveness of security monitoring and response processes.
• Act as a trusted security advisor to support other Jazz IS efforts by providing hands‑on security consulting during design, development, implementation, and testing of solutions for integrating new security technologies as needed.

Qualifications

• 5+ years of experience in security operations, orchestration, incident response, threat detection, and vulnerability management.
• Strong experience with SIEM platforms (e.g., Splunk, Gurucul) for log analysis, alert correlation, and dashboard creation.
• Develop and maintain SIEM infrastructure, data ingestion, performance optimization and support lifecycle.
• Experience performing security incident investigations and forensic analysis.
• Familiar with common attack techniques, tactics, and procedures (TTPs) and frameworks like MITRE ATT&CK.
• Hands‑on technical expertise in at least two of the following areas: Cloud Security, Identity and Access Management, Network Security, Email Security, DLP
• Strong working knowledge of endpoint detection and response (EDR) tools (e.g., CrowdStrike) and their capabilities.
• Hands‑on experience with AWS and Google Cloud Platform.
• Proven experience in developing and implementing security automation using scripting languages (e.g., Python, PowerShell, BASH) or orchestration workflows.
• Experience working in environments composed primarily of SaaS and cloud resources such as Salesforce, Snowflake.
• Solid knowledge of operating system artifacts for Windows/Linux/Unix systems.
• Must be well organized and disciplined to follow security and compliance standards.
• Familiar with regulatory requirements such as GDPR, PII, PHI, and GXP.
• Excellent written and verbal communication skills; ability to convey security concepts to non‑technical audiences (e.g. senior and executive management, internal customers)
• Ability to establish priorities, work independently and proceed with objectives.
• Demonstrated experience leading security project through influence, collaboration, and coalition‑building, and very comfortable in ambiguous and high‑pressure situations.
• Demonstrated vendor relationship management skills, with the ability to build strong rapport.
• Must be flexible to work in the US/EST or US/PST time zone.
• Must be flexible to work after‑hour or on an on‑call basis to support operational and project activities.

Additional Valuable Skills And Certifications

• At least 7 years of relevant IT Security experience and two or more relevant certifications (i.e. CISSP, CISM, CEH, GCIH, GPEN, GWAPT etc)
• Expert experience in popular security controls: AWS security, Azure, Web Proxy, IAM/SSO, Active Directory, Network Security, PAM, App Control, Endpoint Security, DLP, PKI, Key management, Salesforce Shield, Security Automation and Orchestration

Jazz Pharmaceuticals is an equal opportunity/affirmative action employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any characteristic protected by law.

FOR US BASED CANDIDATES ONLY

Jazz Pharmaceuticals, Inc. is committed to fair and equitable compensation practices and we strive to provide employees with total compensation packages that are market competitive. For this role, the full and complete base pay range is: $146,400.00 – $219,600.00

Individual compensation paid within this range will depend on many factors, including qualifications, skills, relevant experience, job knowledge, and other pertinent factors. The goal is to ensure fair and competitive compensation aligned with the candidate's expertise and contributions, within the established pay framework and our Total Compensation philosophy. Internal equity considerations will also influence individual base pay decisions. This range will be reviewed on a regular basis.

At Jazz, your base pay is only one part of your total compensation package. The successful candidate may also be eligible for a discretionary annual cash bonus or incentive compensation (depending on the role), in accordance with the terms of the Company's Global Cash Bonus Plan or Incentive Compensation Plan, as well as discretionary equity grants in accordance with Jazz's Long Term Equity Incentive Plan.

• medical, dental and vision insurance
• 401k retirement savings plan
• flexible paid vacation