Senior Principal Information Security Analyst, Defensive Operations
Regeneron Pharmaceuticals
Summary
We're looking for a hands-on leader to own the platforms that give our security teams visibility across the enterprise. You'll lead a team supporting the Security Monitoring function. The team builds and maintains the Splunk log ingestion pipeline, RBAC, searches, reporting, and dashboards. It also supports the systems that feed our Security Information and Event Management (SIEM) platform, which correlates it all. This is a player-coach role, roughly 50/50 technical work and team leadership. You'll lead a mixed team of employees and vendor staff and act as the escalation point when monitoring platforms or security incidents need senior attention. You'll also explain complex technical topics clearly to non-technical stakeholders.
Job description
Platform health and operations
- Own the availability, performance, and data quality of the SIEM and log collection infrastructure.
- Drive the team and platform toward zero skipped searches, zero unplanned downtime, and no logging errors that affect monitoring.
- Forecast data growth and manage ingest and compute within licensed capacity.
- Provide metrics, performance reports, and dashboards to leadership.
- Apply ITIL practices to incident, request, and change management.
Vendor and service management
- Manage vendor relationships and contracts, including SLA definition, performance reviews, and service review meetings.
- Direct a mixed team of employees and external resources, assigning work in line with shared strategy and goals.
- Lead responses to audit requests related to monitoring systems and controls.
Incident escalation and response
- Escalate incidents and enhancement requests to internal owners and vendors as needed.
- Coordinate with stakeholders during cybersecurity incidents.
- Support triage and escalation of security events and threats, using SIEM data to assist investigations.
Improvement and engineering partnership
- Partner with engineering and architecture teams to define requirements and set feasible timelines.
- Deliver projects that improve security event collection, detection, analysis, correlation, and response.
- Advise infrastructure and security teams on configuration changes that improve event collection.
- Track emerging trends in AI, machine learning, and analytics for security monitoring, and recommend where they add value.
Team management
- Align the team with common short- and long-term goals.
- Make sure the team has the tools it needs, and remove blockers.
- Give team members frequent performance feedback, so they know they're valued and where they can improve.
- Build a trusting environment where it's safe to ask for support and to suggest better ways of working.
Requirements
- 10+ years in IT
- 5+ years in security operations or as a monitoring system manager or lead engineer
- 5+ years leading or directing technical teams, including contractor staff
- Expert-level Splunk experience; Splunk Certified Consultant or equivalent demonstrated expertise
- Advanced Red Hat Linux skills
- Advanced scripting in Python and Bash
- Advanced rsyslog configuration experience
- Experience writing technical requirements and working with engineering teams to deliver them
- Strong written and verbal communication, with the ability to build relationships and present to audiences from engineers to executives
- Sound judgment in weighing security controls against technical and administrative standards and making risk-appropriate tradeoffs
Benefits
- Annual Bonuses
- Incentive Plans
- Equity Awards
- Pension or Retirement Benefits
- 401(k) Company Match
- Health and Wellness Programs
- Fitness Centers
- Medical Insurance
- Dental Insurance
- Vision Insurance
- Life Insurance
- Disability Insurance
- Paid Time Off
- Family Support Benefits
Company overview
Regeneron Pharmaceuticals is a leading American biotechnology company founded in 1988 and headquartered in Tarrytown, New York. The company specializes in inventing, developing, and commercializing life-transforming medicines for people with serious diseases. Regeneron is renowned for its innovative antibody technologies and has developed several groundbreaking therapies, including EYLEA® for retinal diseases, DUPIXENT® for inflammatory conditions, and the COVID-19 antibody cocktail REGEN-COV®. The company operates with a strong focus on research and development across multiple therapeutic areas including ophthalmology, oncology, cardiovascular diseases, and rare genetic disorders. Regeneron's proprietary VelocImmune® technology platform enables the rapid generation of fully human monoclonal antibodies. With over 15,000 employees globally and annual revenues exceeding $14 billion, Regeneron has established itself as a major force in the biotechnology industry, consistently ranking among the top-performing pharmaceutical companies and maintaining a robust pipeline of investigational therapies.