IT Lead, Enterprise Security Data Analytics Job

Job description

IT Lead, Enterprise Security Data Analytics-4301151214DescriptionJohnson & Johnson is currently recruiting for a Lead, Enterprise Security Data Analytics in Raritan, NJ.Johnson & Johnson Family of Companies, caring for the world, one person at a time has inspired and united the people of Johnson & Johnson for 125 years. We embrace research and science
-
- bringing innovative ideas, products and services to advance the health and well-being of people. Employees of the Johnson & Johnson Family of Companies work with partners in health care to touch the lives of over a billion people every day, throughout the world.
With $74.3 billion in 2014 sales, Johnson & Johnson is the world's most comprehensive and broadly based manufacturer of health care products, as well as a provider of related services for the consumer, pharmaceutical, and medical devices and diagnostics markets. The more than 250 Johnson & Johnson operating companies employ approximately 119,000 people in 60 countries throughout the world.
Thriving on a diverse company culture, celebrating the uniqueness of our employees and committed to inclusion. Proud to be an equal opportunity employerThe Lead, Enterprise Security Data Analytics is part of the team responsible for ensuring ongoing support related to the J&J’s enterprise security analytical computing infrastructure. The role partners with Security Operations and Investigations, IT server and network operations and other support groups to ensure security technology solutions are deployed and operated in alignment with policy, security standards enterprise architecture tenants. This technical, hands-on role is part of the information security team that has overall responsibility for security monitoring and analysis of Johnson & Johnson’s IT infrastructure and applications.
The Lead, Enterprise Security Analytics will support the team in primary, secondary and tertiary capacities which will include a combination of the following:Collect, Analyze and manage requirements for reports and alerts from the incident response team. Develop and maintain queries, correlation rules, reports, alerts and workflow related supporting internal customers of the security analytics environment. Configure parsers and interfaces to collect events from various technologies (servers, databases, networks, applications, etc.). Prepare and maintain quality documentation supporting the operation of the security analytics function. This includes but is not limited to: Technical requirements, design, configuration, End user functionality, training and job aids, Support documentation, run books, operational metrics, Executive-level summaries, service overviews, team metrics.
Support the administration of the RSA Security Analytics, SPLUNK, SecureWorks and/or Tripwire environments. Support upgrades and enhancements to the analytics environment through hands-on installation, configuration, testing and troubleshooting. Perform Level 2/3 support for the Incident Response and Investigations teams related to the delivery of services from the analytics environment. Enhance the security analysis capabilities through creative problem seeking and solving; recommending improvements and exploring new methods for enhancing business functions. Maintain current knowledge of information security, industry trends, IT and security technologies, data protection regulations, and industry & global compliance frameworks.
QualificationsAn Associate’s degree or equivalent work experience is required. A minimum of 5 years’ experience in IT engineering or operations function with at least a year related to security technologies is required. A working knowledge of information security principles is required. Working knowledge of SDLC principles and program governance is required. Strong IT experience and the ability to articulate the relationship between elements in the technology stack and associated data is required. Demonstrated ability to contribute to complex projects, priorities and multiple tasks is a must. Results Orientation/Sense of Urgency – ability to drive to tight timelines, and excellent interpersonal skills – verbal and written is a must. Ability to learn quickly, employing different techniques as appropriate is required. Ability to assimilate inputs from various sources and apply that knowledge in a meaningful way to assigned tasks is required. Working knowledge of more than one of the following is required: Splunk, RSA SA, QRadar, HP ArcSight, Netwitness, LogRhythm, Alert Logic, etc.; Windows Servers 2003+, RedHat Ent Linux 5/6, Solaris 9+ or other UNIX distribution; Vmware vSphere 5 or 6; Cisco IOS/IronPort/ASA/, F5 administration, Juniper network devices; TCP/IP (incl. DNS, DHCP, VIP, NAT/PAT); Oracle 10+ databases, MS SQL databases. Working understanding with one or more security tools – Splunk, Tripwire, RSA Security Analytics, SecureWorks, snort, etc. is preferred. Proficiency in one or more scripting language (e.g. UNIX shell, Perl, Python, etc.) is preferred. Working knowledge of diverse IT products across technologies in a global environment is preferred. Demonstrated experience working across cultural and time boundaries to optimize results is preferred. The primary location is Raritan, NJ. This individual may be based out of another J&J Facility within NJ or PA with frequent travel to Raritan.
BE VITAL in your career. Be seen for the talent you bring to your work. Explore opportunities within the Johnson & Johnson Family of Companies.
J2W: DICEJ2W: LI NAPrimary Location:North America-United States-New Jersey-RaritanOrganization: Johnson & Johnson Services Inc. (6090)Job Function: Information SecurityCertain sites within the Johnson & Johnson Family of Companies participate in E-Verify as appropriate in accordance with Company guidelines and federal or state law. To learn more about the government sponsored program and to see a list of the sites that are currently enrolled, please click here.
Johnson and Johnson Family of Companies are equal opportunity employers, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, genetic information, national origin, protected veteran status, disability status, or any other characteristic protected by law. EEO is the Law EEO is the Law GINA Supplement