Senior SIEM engineer

Join Amgen’s Mission of Serving Patients

At Amgen, if you feel like you’re part of something bigger, it’s because you are. Our shared mission—to serve patients living with serious illnesses—drives all that we do.
Since 1980, we’ve helped pioneer the world of biotech in our fight against the world’s toughest diseases. With our focus on four therapeutic areas –Oncology, Inflammation, General Medicine, and Rare Disease– we reach millions of patients each year. As a member of the Amgen team, you’ll help make a lasting impact on the lives of patients as we research, manufacture, and deliver innovative medicines to help people live longer, fuller happier lives.
Our award-winning culture is collaborative, innovative, and science based. If you have a passion for challenges and the opportunities that lay within them, you’ll thrive as part of the Amgen team. Join us and transform the lives of patients while transforming your career.

What you will do
Let’s do this. Let’s change the world. In this vital role you will be responsible for developing and implementing the organization’s security monitoring strategy to safeguard data, systems, and networks against potential threats. This includes designing and deploying robust security monitoring architecture, ensuring comprehensive coverage and real-time threat detection. The role involves close collaboration with IT teams to incorporate security monitoring into every layer of the technology stack. Key responsibilities include collaborating with the security monitoring team, handling risk, and ensuring compliance with relevant regulations and standards.

Help define, lead and implement Security Information and Event Management (SIEM) and User and Entity Behavior Analytics (UEBA) strategy and processes, with a focus on log collection strategy and supporting infrastructure

Handle technologies and processes including issue identification and resolution, integration with other tools, documentation and continuous improvement of the service

Propose and participate in the develop the roadmap and metrics for processes and tools

Analyze, design, develop and operate programs, shell scripts, tests, and infrastructure automation capabilities in an advanced security context

Coordinate with internal and external partners to remediate or mitigate security vulnerabilities and assist technical teams

Advise incident responders as they develop and coordinate response, containment and remediation capabilities as appropriate

Support cyber threat intelligence, security operations and other security teams in day-by-day activities

Maintain relationship with vendors and strategic partners

Participate in audits covering information security services and technologies

What we expect of you
We are all different, yet we all use our unique contributions to serve patients. The ideal candidate possesses strong leadership qualities, a deep understanding of cybersecurity practices, and extensive experience in managing large-scale security monitoring programs.

Basic Qualifications:

Master’s degree with 4 to 6 years of experience in Information Systems or related field OR

Bachelor’s degree with 6 to 8 years of experience Information Systems or related field OR

Diploma with 10 to 12 years of experience in Information Systems or related field

Proven track-record in understanding of common security monitoring and detection engineering practices

Demonstrate in-depth knowledge of cybersecurity frameworks, technologies, and best practices

Experience in risk management, incident response, and security governance

Strong knowledge of security architecture frameworks and principles

Preferred Qualifications:

Proficiency with deploying and running log collection infrastructure (e.g. Splunk Universal Forwarder, Fluentd, Cribl) and SIEM solutions (e.g. Qradar, Splunk, ArcSight, Sentinel)

Experience with network security, endpoint protection, and incident response

Proficiency in scripting and automation (e.g., Python, Bash) is a plus

Experience with deploying, running and monitoring cloud-hosted infrastructure

Professional Certifications:

GCDA (required)

GSEC (preferred)

CompTIA Security+ (preferred)

CISSP (preferred)

Soft Skills:

Excellent analytical and solving skills

Strong verbal and written communication skills (English)

Ability to work effectively with global, virtual teams

High degree of initiative and self-motivation

Ability to handle multiple priorities successfully

Team oriented, with a focus on achieving team goals

Strong presentation and public speaking skills

What you can expect of us
As we work to develop treatments that take care of others, we also work to care for your professional and personal growth and well-being. From our competitive benefits to our collaborative culture, we’ll support your journey every step of the way.
In addition to the base salary, Amgen offers competitive and comprehensive Total Rewards Plans that are aligned with local industry standards.