Senior Engineer, Cybersecurity Engineering

Johnson & Johnson is looking for a Senior Engineer, Cybersecurity Engineering to be part of a fast-paced, innovative, and highly visible team. The position will be located in Raritan, NJ or San Paolo, Brazil. Remote work options may be considered on a case-by-case basis and if approved by the Company. The Senior Engineer, Cybersecurity Engineering will play a key role in the J&J Information Security and Risk Management organization. Her/His responsibilities include Engineering, Deployment, and Operational Support of Network Security and Security Service Edge (SSE) / Zero-Trust infrastructures that provides security capabilities across the enterprise with a primary emphasis on Cloud-based Network Security, Security Service Edge (SSE) / Zero-Trust Network Access, Firewalls, and inspection technologies (including Cloud-Delivered Security-as-a-Service “SecaaS” and next gen Firewalls). The Product Manager is responsible and accountable for Designing, Building, Development and Operational Support of all network security related products and technologies. She/He will partner with other Information Technology groups, including, End-User, CLOUDx, Network Services and Enterprise Technology to ensure Security products are deployed and aligned with all aspects of core infrastructure capabilities. In addition, the Manager, needs to have great Communication (oral and written), Leadership, and Business relationship skills to coordinate efforts during security incident and collaboration with other Information Security groups to provide guidance in remediation of security findings. RESPONSIBILITIES/PRINCIPAL DUTIES Own Network Security Products and support Engineering activities, including: Plan, Design, Engineer, Test and “package”, as well as Support and Manage product features and capabilities of Network Security technologies Plan, Design, Engineer, Test and “package” integration strategies and transition of existing and new technologies Design and create required documentation in support of Network Security products and technologies Partner with other IT and Business groups (including End-User, CLOUDx, Network Services and Enterprise Technology) to ensure effective and efficient design and functionality Manage Day to Day Security Products vendors ensuring prompt delivery of quality services, features, capabilities, bug fixes, etc. by developing and managing operational and quality metrics Perform L2/ L3 Engineering related activities in support of the environment including troubleshooting issues and own escalation of issues as needed with respective vendors Candidate will make decisions related to the effectiveness of key security products and technologies for J&J and present to management Candidate will use their judgement and expertise to work through design and implementation issues throughout projects, escalating to the project team and management as appropriate Candidate will make decision regarding the prioritization of activities across the teams. Candidate must be able to make independent and binding determinations with regards to the cost effective, efficient and security design and implementation of the technologies Responsible for end-to-end support and management of the Network Security Products and, in particular, the Cloud-Delivered Security-as-a-Service technology Create, maintain, and continuously improve standard operating procedures, installation guides and knowledge articles Develop automation playbooks and investigate opportunities to develop greater level of automation across the team Recommend configuration and enhancements for Network Security Products, based on contextual information and current threat landscape Act as liaison with vendors and suppliers whose technologies are utilized to manage Cloud-Delivered Security-as-a-Service technologies Prepare and presents management level briefings on technology improvement recommendations Assist in the strategic information security direction for Johnson & Johnson and present to management, recommend new policy requirements and recommend program management decisions on relevant security programs Partner with Information Technology group and Information Security during incident response activities Assist with security events/incidents, supporting incident response activities with Cyber Security Operations as appropriate Perform other Network Security work-related duties as assigned Identify operational deficiencies, technology gaps and participate in actions plans to address them Participate in assigned security related projects as the Information Security owner and SME of these technologies, responsibilities include, but not limited to, defining required resources for completion, and identifying and highlighting possible technology, resource, and/or skill gaps Provide input and recommendations to management on the risk profile, emerging security trends (internal and external) and risk management strategies Computer Systems Validation (CSV) and System Development Life Cycle (SDLC) components Recommend configuration and enhancements to ensure protection and productivity for Isolated Computing Environments (ICE) Qualifications Required: A Bachelor’s Degree preferred in Computer Science, Engineering, Risk Management, Cyber Security, or a related field Experience in Network Security or related field Experience with Security Service Edge (SSE) / Zero-Trust Network Access and/or Secure Services Information Security and/or Network Engineering experience, preferably within a global, regulated, healthcare industry Engineering, Deployment and Support experience with key Security Products and/or industry equivalent An understanding of network routing/switching, firewalls, network monitoring, traffic analysis, Intrusion Prevention Systems Demonstrated experience with Network Security Engineering, recognizing network-based threats and vulnerabilities Willingness and the ability to learn in a dynamic environment Demonstrated experience in writing and managing user, application, and compliance documentation, including the ability to coach others for the quality of content Demonstrated ability to manage complex projects, priorities and/or multiple tasks Preferred: Industry certifications like ITILv3, CISSP, CISA or equivalent security experience Experience with vendor management and product technology roadmaps Experience working in large, global organization with strong influence and presentation skills Experience leading global projects and geographically diverse teams Experience with M&A activities and use of Zero-Trust technologies For United States: Remote work options may be considered on a case-by-case basis and if approved by the Company. The anticipated base pay range for this position is $93,000 - $139,000. The Company maintains highly competitive, performance-based compensation programs. Under current guidelines, this position is eligible for an annual performance bonus in accordance with the terms of the applicable plan. The annual performance bonus is a cash bonus intended to provide an incentive to achieve annual targeted results by rewarding for individual and the corporation’s performance over a calendar/ performance year. Bonuses are awarded at the Company’s discretion on an individual basis. Employees may be eligible to participate in Company employee benefit programs such as health insurance, savings plan, pension plan, disability plan, long-term incentive, vacation pay, sick time, holiday pay, and work, personal and family time off in accordance with the terms of the applicable plans. Additional information can be found through the link below. At Johnson & Johnson, we’re on a mission to change the trajectory of health for humanity. That starts by creating the world’s healthiest workforce. Through cutting-edge programs and policies, we empower the physical, mental, emotional and financial health of our employees and the ones they love. As such, depending on location and subject to local legislation, candidates offered employment may be required to show proof of COVID-19 vaccination or, in certain countries, secure an approved accommodation prior to the commencement of employment to support the well-being of our employees, their families and the communities in which we live and work. If you are invited to interview for the position, your recruiter will advise on the vaccine requirement status in your geographic location. For more information on how we support the whole health of our employees throughout their wellness, career and life journey, please visit www.careers.jnj.com. Primary Location United States-New Jersey-Raritan-1000 US HIghway 202 Other Locations Latin America-Brazil, North America-United States, Latin America-Brazil-São Paulo Organization Johnson & Johnson Services Inc. (6090) Job Function Info Technology Requisition ID 2206047576W