Specialist Security Engineer - Endpoint Configuration

The Specialist Endpoint Security Engineer will operate, manage, and improve Amgens endpoint security posture solutions. In the Endpoint Security team, you will identify emerging risks related to endpoint protection, advise management, and develop technical remediations to address those risks. Specialists lead the development of processes and procedures for multiple solutions Amgen utilizes to deliver to the promise of a secure digital workplace. They run multiple projects simultaneously to implement and improve the endpoint security protections and use advanced analytics to demonstrate success. This engineer will play a key role in educating technologists and business leaders about the security strategies that both protect and enable business processes related to cloud data handling. Lets do this. Lets change the world. In this vital role you will:

• Designs, operates, maintains, and enhances capabilities for the technical systems that ensure protection of endpoints for Amgens global workforce.
• Works daily alongside the digital workforce experience team to specify, implement, and validate security controls for Amgens workstation and mobile platforms.
• Identifies new risk areas for data and plans controls to mitigate those risks.
• Researches new technologies, processes, and approaches based on industry practices and recommends future plans for secure configurations.
• Authors procedures and guidelines and advises on policies related to workstation and mobile protection requirements and remediation or investigation of violations.
• Develops and conducts training on protection technologies for operations staff. Educates business leadership about data risk.
• Consults other technology groups on endpoint protection strategies and recommends appropriate points of both technical and process integration.
• Partners with the Manager of Endpoint Security to collaborate closely with legal and human resources leadership on violation remediations.
• Collaborates with architecture strategy leaders and business unit leadership to ensure that security by design configurations are incorporated into new business projects.
• Collaborates with Endpoint Security Engineers to integrate protection technology into the operations of traditional Endpoint Detection and Response operations.

We are all different, yet we all use our unique contributions to serve patients.

Basic Qualifications:

• Doctorate degree OR
• Masters degree and 4 to 6 years of Information Security or Information Technology experience OR
• Bachelors degree and 6 to 8 years of Information Security or Information Technology experience OR
• Diploma and 10 to 12 years of Information Security or Information Technology experience

Preferred Qualifications:

• Familiarity with one or more security frameworks, especially in regulated environments.
• Holds or is actively seeking one or more security related certifications, preferably with a focus on cloud technologies or data protection.
• Proficiency specifying requirements for technical systems, as well as designing, implementing, and operating those systems.
• Expertise in global IT operations, including an understanding of regulatory and cultural differences encountered when dealing with international peers and customers.
• Skill with elements of MDM systems such as Intune, Workspace One, and JAMF on Windows, MacOS and iOS based operating systems.
• Basic capabilities with programming or scripting languages.
• Understanding of endpoint technologies from a security perspective including the security risks associated with misconfiguration.
• Experience implementing secure baselines such as DISA STIGs and CIS Benchmarks.
• Experience with project management workstream leadership, preferably using Agile methodology.
• Deep knowledge of the principles of endpoint protection, including availability, integrity, and confidentiality of user devices.

• Proficiency with communications focused on written technical processes and the ability to convey complex ideas clearly in front of an audience.
• Experience with data analytics in building executive reports.
• Reputation of successfully navigating large enterprise environments, understanding both ITIL driven processes and business relationship building
• Ability to self-direct work on multiple priorities with little to no oversight, based on critical initiatives.

• This position requires you to work from 2:00pm to 10:00pm IST.

• Systems Security Certified Practitioner (SSCP) or Security+
• SANS Certifications

• Excellent analytical and troubleshooting skills
• Highly motivated and able to work effectively under minimal supervision
• Strong written and verbal communication skills in English
• Successful management of multiple priorities
• Effective working with global, virtual teams
• Team-oriented, placing priority on the successful completion of team goals