Data Science Lead - Cyber Security

Key Skills

Agile methodologies, AWS, Azure, Cyber Security, Data Engineering, Google Cloud Platform (GCP), Lucene, Machine learning techniques, Python Programming, R Programming, SPARK Programming, SQL

Job Description

Johnson and Johnson is recruiting for a Data Science Lead - Cyber Security. This position is located in Raritan, NJ. Candidates will be considered in North America and Brazil. This position may require up to 25% travel (domestic and international).

Remote work options may be considered on a case-by-case basis and if approved by the Company.

Caring for the world, one person at a time has inspired and united the people of Johnson & Johnson for over 130 years. We embrace research and science -- bringing innovative ideas, products, and services to advance the health and well-being of people. At Johnson & Johnson, we believe good health is the foundation of vibrant lives, thriving communities and forward progress. That’s why for more than 130 years, we have aimed to keep people well at every age and every stage of life. Today, as the world’s largest and most broadly-based healthcare company, we are committed to using our reach and size for good. We strive to improve access and affordability, create healthier communities, and put a healthy mind, body and environment within reach of everyone, everywhere. Every day, our more than 130,000 employees across the world are blending heart, science and ingenuity to profoundly change the trajectory of health for humanity. Thriving on a diverse company culture, celebrating the uniqueness of our employees and committed to equity. Proud to be an equal opportunity employer.

We are embarking on a major strategic transformation of our Cyber data analytics, automation and intelligence over the next 3 years. This is an exciting opportunity to be a member of our J&J Information Security and Risk Management (ISRM) organization who will work at the intersection of business strategy, human-centred design, and emerging technology platform/program delivery.

The Cyber Data Analytics will lead a set of critical cyber data analytics solutions to accurately detect, protect and report key cyber vulnerabilities, threats or events. The candidate will perform hands-on the full solution product life cycle. It includes internal and external partner's engagement, architecture alignment, to shape the product vision / capability / technology evolution, to own and deliver the product projects and to ensure solid continuous Dev/OPS. The candidate will pay continuous attention to enhance the product delivered business value, user experience and capabilities while optimizing its full costs and technical reliability / simplicity.

This exciting and unique role is bridging 2 key domain expertise’s:

1. The cyber world with network security, end point security, app security, vulnerability DB, SIEM's, identity and authorization management.
2. The data engineering/analytics/ automation world: ingesting and blending data from multiple systems, storing it in SQL / NoSQL database, processing and creating enhanced analytics / automation / visuals to detect threats and augment the cyber user insights and tasks.

Specific responsibilities:

• Develop and engineer data models, analytics reports, algorithms and end-to-end data products that to detect existing/emerging cyber threats along with actionable insights and measurable business impacts.
• Proactively engage with her/his internal key cyber security business & IT partners to empathize with their strategic, tactical and analytical needs
• Approach and initiate data projects with a goal of productionizing solutions.
• Develop custom cyber threat detection rule sets and other content for a variety of security platforms, including SIEMs and SOAR.
• Develop scalable and efficient automated processes for data products’ validation, implementation, and monitoring.
• Identify and analyze the applicability and scalability of innovative data technologies, algorithms, and tools for threat intelligence
• Develop & monitor solid project case, plans, business partner engagements, implementation timelines, training and deployment schedules relating to her/his products.
• Clearly articulate and monitor her/his product(s) net value vs costs. Seeks opportunities and efficiencies through strategic decisions that affect cost and quality, seeking the most cost-effective operation of the environment while maintaining appropriate levels of compliance and security
• Define & prioritize her/his products key capabilities backlog and handle related customer expectations / timelines.
• Delivers quality work and outstanding customer service in a high-pressure, fast paced setting to meet company needs.
• Ensure full compliance with external and internal data privacy, system documentations, data life cycle and security guidelines.
• Responsible for key vendor & customer relationships across the platforms and services. Set up and monitor clear product SLA, measurable performance, product health monitoring and continuous improvement.
• Have agreed business continuity plan, data archiving / disaster recovery / system capacity strategy & related operational procedures.
• Ensure solid Agile DEV/OPS governance & support management of her/his products, solid knowledge management, unit / user acceptance testing, smooth orchestration and continuously monitoring. Improve the product reliability, patching and technology life cycles.

Qualifications

• 4-6 years of practical experience with Data Engineering and Data Science on Cyber Security front.
• A minimum of a Bachelor’s degree in Computer Science/Engineering majors, or equivalent years of experience in a comparable role with a demonstrable track record of successful experiences is required
• Experience in leading data projects end-to-end, influencing others without having supervisory responsibility is required.
• Demonstrated experience in all phases of managing data projects including problem definition, solution formulation, model building, productionizing, and delivering measurable impact.
• Proven experience with scripting languages for data processing and AI/ML model development (Including but not limited to SQL, Spark, Python, and R)
• Excellent hands-on, multi-functional skills in multiple technology areas such as servers, network, data center and applications are required.
• Experience in cloud-based data engineering solutions like Azure, AWS, Google, advanced SQL query development & database modelling.
• Knowledge of traditional ML concepts such as SVMs, trees, and boosting as well as more recent deep learning fundamentals.
• Strong presence, influencing, collaboration, information-sharing and organizational skills is required.
• Strong communicator with excellent verbal and written presentation skills - able to evangelize data informed decision-making at all levels.
• Ability to work independently, in fast paced environment and prioritize in parallel while managing expectations.
• Curious and fast learner.
• Exercise independent judgment, strong decision making and problem solving for key processes.
• Must have a strong customer service orientation, eye for business value, and a bias for action.
• Great teammate, works with virtual, global teams – including diverse groups of people with varied backgrounds and cultural experiences

Preferred

• First-hand Security Operations Center experience performing analyst/security engineering duties.
• Good knowledge of network security principles, threat detection practices and rule writing (Esper/KQL/Lucene) is preferred
• Experience within highly regulated GxP or SOx environment is preferred
• Deep understanding of how malicious traffic appears over the network and threat detection knowledge.
• Familiarity with the MITRE ATT&CK model and associated TTP is preferred
• Cyber certification: CISSP or CISM with deep expertise of network / server / db / app / user security, configuration and cyber related data points.
• Experience in a multi-platform, multi-vendor large enterprise is required
• Understanding of various log formats and source data for SIEM Analysis.
• Agile Scrum / Product Owner / PMP certification is a plus.
• An Advanced degree is preferred

At Johnson & Johnson, we’re on a mission to change the trajectory of health for humanity. That starts by creating the world’s healthiest workforce. Through cutting-edge programs and policies, we empower the physical, mental, emotional and financial health of our employees and the ones they love. As such, depending on location and subject to local legislation, candidates offered employment may be required to show proof of COVID-19 vaccination or, in certain countries, secure an approved accommodation prior to the commencement of employment to support the well-being of our employees, their families and the communities in which we live and work. If you are invited to interview for the position, your recruiter will advise on the vaccine requirement status in your geographic location.

Johnson & Johnson is an Affirmative Action and Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, or protected veteran status and will not be discriminated against on the basis of disability.

For more information on how we support the whole health of our employees throughout their wellness, career and life journey,