Career Category

Job Description

HOW MIGHT YOU DEFY IMAGINATION?

THE AMGEN CAPABILITY CENTER IN LISBON, PORTUGAL (ACCP) will be home to over 300 multi-national and multi-cultural employees, representing a broad range of cross functional capabilities, including Commercial, General and Administrative, Research and Development and more. The ACCP will offer rich career growth and development opportunities, regional and global exposure and the opportunity to LIVE, WIN and THRIVE in one of Europe’s most attractive cities.
If you feel like you’re part of something bigger, it’s because you are. At Amgen our shared mission—to serve patients—drives all that we do. It is key to our becoming one of the world’s leading biotechnology companies. We are global collaborators who achieve together—researching, manufacturing and delivering ever-better products that read over 10 million patients worldwide. It’s time for a career you can be proud of. Join us.

SPECIALIST AUTOMATION

LIVE
WHAT YOU WILL DO
The Specialist Automation reviews, consumes reports and artifacts relating to the tactic techniques and procedures of threat actors and design automated actions to accelerate the validation, containment, eradication and remediation of security incidents.
Engineers will be familiar with many leading security tools and industry standard scripting languages. Automation and Orchestration Specialist engineers will create, maintain and manage a library of response plans to common information security threats and customize these plans in accordance with the particularities of the environment.
Responsibilities include:
• Manages the Automation and Orchestration service
• Mentors and coordinates other team members and provides technical guidance to other automation and orchestration analysts.
• Defines the implementation timelines for automation projects.
• Develop logic that bridges connectors, tasks and human input to accelerate the response to escalated security incidents.
• Develop connectors that collect enrich and leverage data from third party and proprietary security tools.
• Perform regular updates of existing scripts based on changes in the Threat Landscape or security controls.
• Drive continuous improvement of existing scripts to address new threats and tactics employed by attackers.
• Manage an inventory of subtasks that enable broader playbook creation.
• Produce new playbooks as threats change and new security tools and controls emerge in the market place.
• Ensure timely and effective identification of anomalies.
• Prioritize investigation of anomalies and communicate/escalate issues, concerns, including higher risk anomalies to the IT department and Information Security in clear, concise and risk-based language.
• Perform regular reporting on the usage of scripts, the effectiveness of a script to determine operational cost savings.
• Lead the automation project by ensuring quality of the services provided by the team.
• Provide training and guidance to other team members.
• Extend the automation tool capabilities by working closely with the vendor.
• Take initiative in discovering new use cases in which automation could help.

WIN
WHAT WE EXPECT OF YOU

Minimum Qualifications:
• Undergraduate degree
• 4-6 years’ experience in performing security risk management, analysis and/or assessments
• Strong written and verbal communication skills including the ability to explain technical matters to a non-technical audience.
• Experience in working in a cross-functional, multi-cultural environment
• Medium knowledge of a scripting language, preferably Python

Desired Qualifications:
• Degree in Information Security, Computer Science, Law Enforcement computer forensics or 6+ years of relevant combination of education and work experience.
• Experience in Security Operations Centers, with security logs collection, analyses, forensics investigations and reporting/alerting
• Advanced knowledge of a scripting language, preferably Python
• Ability to work in Linux and basic understanding of SQL language
• Familiarity with REST API best practices and usage.
Preferred Certifications (Any):
• CISSP, CISM, CIPP, GPEN, GWAPT, SANS GIAC/GSEC
• CEHSACA CRISC, CISA, CISM, ISC2 SSCP, CISSP

THRIVE
WHAT YOU CAN EXPECT OF US
• Vast opportunities to learn, develop, and move up and across our global organization.
• Diverse and inclusive community of belonging, where colleagues are empowered to bring ideas to the table, take risks, and act.
• Generous Amgen Total Rewards Plan comprising healthcare, finance, wealth and career benefits.
• Flexible work arrangements.

APPLY NOW
FOR A CAREER THAT DEFIES IMAGINATION
In our quest to serve patients above all else, Amgen is the first to imagine, and the last to doubt. Join us.
CAREERS.AMGEN.COM

EQUAL OPPORTUNITY STATEMENT
Amgen is an Equal Opportunity employer and will consider you without regard to your race, colour, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, or disability status.
We will ensure that individuals with disabilities are provided a reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request an accommodation.