Information Security Operations Analyst
Legendcareers · Somerset, New Jersey, United States
About this role
**Legend Biotech — Information Security Operations Analyst (Somerset, NJ)** **Role Overview** The Information Security Operations Analyst is a key member of the Information Security Office, responsible for operating, tuning, and monitoring the company’s security technology stack. You’ll detect, triage, contain, and report on security events; manage vulnerability, email, endpoint, network, and identity security controls; deliver phishing simulation and awareness; and produce operational security metrics aligned to security frameworks and regulatory requirements. **Key Responsibilities** - **Security monitoring & response:** Monitor SIEM and alerting platforms; triage, investigate, and escalate alerts; support incident investigations, root cause analysis, and incident reporting. - **Detection tuning & platform health:** Tune detection rules, risk scoring, and log sources; maintain collectors, integrations, certificates, and upgrades with vendors and Infrastructure. - **Vulnerability management:** Run on-demand and scheduled scans for new servers, software, and changes; report results and track remediation with asset owners. - **Email security:** Administer the secure email gateway (quarantine, sender/policy rules, threat alert triage) and tune email DLP. - **Identity threat response:** Investigate risky sign-ins and suspicious MFA/device registrations; perform containment (session revocation, MFA reset, device removal). - **Endpoint, network & cloud security:** Support EDR/XDR, MDM/UEM, secure web gateway, and ZTNA operations, including compliance reviews and policy rollouts. - **Security awareness:** Design, run, and report on phishing simulations; align content with awareness events and support end-user training. - **Access & third-party risk:** Remove privileged and security-tool access during offboarding; identify unapproved software and route requests through TPRM. - **Documentation & reporting:** Maintain SOPs, KB articles, runbooks, monthly operations reports, and leadership metrics. - **Projects, audit & improvement:** Support vendor POCs, new security implementations, internal/external audits, annual IT risk assessments, and program enhancements. - **Decision making:** Independently triage alerts, determine escalation to the Incident Response Manager, and execute first-line containment within established procedures; recommend tuning, policy changes, and remediation priorities. **Requirements** - Bachelor’s degree (or post-graduate) in Computer Science, Engineering, or related field. - Related Information Security certifications. - 5+ years of cybersecurity experience using security tools, with cloud environment experience. - Experience implementing and configuring security tools. - Experience testing and evaluating security products. - Hands-on SOC experience (alert triage, investigation, and incident response support). - Working knowledge of IT/compliance mandates (e.g., Sarbanes-Oxley, HIPAA, GDPR, CCPA, PCI DSS, FDA) is desired. - Working knowledge of security frameworks/standards (NIST, ISO, CIS, COBIT). - Strong analytical/technical skills; excellent planning, organization, and written communication. - Ability to communicate technical information in business terms. - Strong interpersonal skills (teamwork, facilitation, negotiating). - Ability to influence peers and build relationships across teams. **Security Operations Tools (examples)** - SIEM, vulnerability scanning, secure email gateway, EDR/XDR, MDM/UEM **Network &
Listing freshness
CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.