Associate IS Security Engineer

Amgen is searching for a Associate Endpoint Security Engineer who will report to the Manager, Endpoint Security. This position will provide essential services that enable us to better pursue our mission.

As a Associate Endpoint Security Engineer, you will be a technical endpoint security generalist for a very diverse endpoint solution. You will be part of a team that is responsible for incident management, change execution, and the maintenance and support of endpoint security technologies in a rapidly changing security sector.

This role will have the responsibility of ensuring endpoint security solutions and policies are on track to meet and respond to threats inside of the company's environment. You will ensure that all technologies are operationally ready and that the endpoint security and SOC teams are enabled to execute on capabilities as needed to resolve operational issues or business requirements.

The Senior Associate Endpoint Security Engineer will be responsible for delivering world-class security systems and tools management related to the Endpoint Security space. The role will work with other engineers and business units to help spec, build, administer/configure, and maintain critical preventive and detective security infrastructure related to Amgen’s endpoints

Areas of responsibility include:

• Evaluate requests related to the service delivery and working order of Amgen endpoint solutions across Amgen’s global enterprise
• Run service delivery processes including reporting, analyst reviews, and event triage in anti-virus, anti-malware, endpoint detection and response solutions and software whitelisting tools.
• Operate scripts for the maintenance and the reporting of the endpoint solution including discovery and software deployment.
• Upkeep of enterprise documentation for endpoint security processes, run books and standards
• Provide first point of contact support to enterprise counterparts, identifying appropriate courses of handling for with endpoint security detections
• Review events and logs for actionable events and needed resolutions.
• Act as point of contact for the Security Operations Center team in handoff of investigations with endpoint security solutions
• Participate in regular meetings and conference calls with the client, IT, business partners and vendors to help ensure technical coverage for new or existing projects across the business
• Build knowledge towards expertise in anti-malware operation and indicators of threat across Amgen
• Maintains capabilities for the technical systems that ensure protection of workstations, servers, cloud, and manufacturing endpoints for all Amgen global operations.
• Collaborates with incident response and other stakeholders to analyze and develop effective mitigations against emerging and evolving threats.

Preferred Qualifications

• Basic experience with endpoint detection and response tools
• Some experience with interpreting scripts (PowerShell, Python, etc) and evaluating scripted code
• Ability to interpret indications of compromise (IOCs) across diverse components of both information and operation technology systems.
• Experience reviewing documentation for Infrastructure Security implementations
• Exposure to ITIL processes such as Incident, Problem, Configuration and Change. Exposure to Agile project management methodology and tools
• Collaborate multi-functionally with peer engineers to deliver continuous improvement in cyber defense and resilience. Acts as a resource to other technologists.
• Fluency in written and spoken business communications.
• Growing understanding and hands-on experience with windows registry, Active Directory and Group Policy.
• Ability to interpret complex business use cases into technical actionable configurations.
• Proficiency applying requirements for technical systems, as well as implementing and operating those systems
• Track record of project team participation, preferably using multiple methodologies.
• Experience with data analytics focused on building basic reports
• Ability to self-direct work on priorities with little to no oversight, based on strategic initiatives.

Basic Qualifications:

Bachelor's degree and 2 - 6 years of Information Security or Information Technology experience

OR

Master's degree and 1 - 4 years of Information Security or Information Technology experience

Preferred Certifications:

• Systems Security Certified Practitioner (SSCP) or Security+
• SANS Certifications