At Johnson & Johnson, we believe health is everything. Our strength in healthcare innovation empowers us to build a world where complex diseases are prevented, treated, and cured, where treatments are smarter and less invasive, and solutions are personal. Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity. Learn more at https: //www.jnj.com

Job Function:

Job Sub Function:

Job Category:

All Job Posting Locations:

Job Description:

Overview

We are seeking a dynamic and experienced Director of Cybersecurity Defense Engineering to lead our efforts in enhancing our cybersecurity posture through innovative technology solutions. The ideal candidate will possess a deep understanding of cybersecurity principles, extensive experience in automation technologies, and the ability to drive strategic initiatives in a fast-paced environment.

Key Responsibilities

• Leadership & Strategy:
  • Develop and implement a comprehensive automation strategy to strengthen cybersecurity defense mechanisms.
  • Lead a team of engineers and analysts in designing, building, and deploying automation solutions for threat detection, response, and remediation.
• Automation and Content Development:
  • Oversee the development of automated workflows, playbooks, and tools to streamline security operations.
  • Oversee the development of new and improved detection logic across various technologies including SIEM, SOAR, and EDR.
  • Collaborate with cross-functional teams to integrate automation and detection solutions into existing security infrastructures.
• Threat Intelligence & Analysis:
  • Utilize threat intelligence to inform automation efforts and ensure proactive defense measures.
  • Analyze security incidents and develop automated responses to improve incident response times.
• Tool Evaluation & Selection:
  • Evaluate and recommend cybersecurity tools and technologies that enhance automation capabilities.
  • Maintain up-to-date knowledge of industry trends and emerging technologies in cybersecurity automation.
• Risk Management:
  • Identify potential risks and vulnerabilities in systems and processes to implement automation to mitigate them.
  • Conduct regular assessments and audits of automated systems to ensure effectiveness and compliance with industry standards.
• Team Development:
  • Mentor and develop team members, fostering a culture of innovation and continuous improvement.
  • Lead training initiatives to enhance team skills in automation technologies and cybersecurity practices.
• Reporting & Metrics:
  • Establish key performance indicators (KPIs) to measure the effectiveness of automation initiatives.
  • Prepare and present regular reports to senior management on the status and impact of cybersecurity automation efforts.

Required Minimum Education: BA/BS or equivalent experience

Required Years of Related Experience: 12 years of overall experience with 5 years’ experience in a security defense leadership

Required Knowledge, Skills and Abilities:

• A minimum of 8 years of cyber security experience and industry leading frameworks
• Experience leading and managing automation and defense techniques defining industry standards.
• Strong understanding of security frameworks, compliance standards, and best practices (e.g., NIST, ISO, CIS).
• Proficiency in automation tools and technologies (e.g., SOAR platforms, AI tools, and SIEM tools)
• Strong proficiency in python and javascript, with demonstrated development experience using those languages
• Familiarity with threat detection and incident response methodologies.
• Excellent executive intelligence writing and briefing skills.