N

Novartis

Global pharmaceutical company delivering science-based innovations

Associate Director DDIT ISC Detection & Response

Security Operations & Incident ResponseConfirmed live in the last 24 hours
Full-timeBarcelona, Spain

About the Job

Requirements

  • At least 8 years of cybersecurity experience, including at least 5 years in Security Operations, Threat Detection, Incident Response, and Threat Hunting.
  • Proven experience leading complex security investigations and driving cross-functional initiatives in large enterprise environments.
  • A strong track record of enhancing detection capabilities, incident response processes, operational efficiency, and investigation quality.
  • Experience mentoring security analysts and influencing stakeholders across teams without direct people-management responsibility.
  • Hands-on expertise with SIEM, EDR/XDR, Detection Engineering, Security Telemetry, and Incident Response tools such as Microsoft Sentinel, Microsoft Defender, and Splunk.
  • Solid knowledge of cloud security investigations across Azure and/or AWS, including identity, endpoint, and cloud telemetry analysis.
  • Skill in leveraging MITRE ATT&CK, threat intelligence, and attacker behavior analysis to improve detection and response strategies.
  • Proficiency in security automation, SOAR, KQL/SPL/Python scripting, and AI-enabled SOC use cases.
  • A Bachelor's degree or equivalent experience.

Responsibilities

  • Shape and influence global TDR strategy, driving operational excellence, innovation, and advanced cyber defense capabilities.
  • Serve as a senior technical authority, providing strategic guidance on complex security challenges and critical incident response activities.
  • Drive AI adoption, intelligent automation, and emerging technologies to transform detection and response capabilities.
  • Lead strategic initiatives in collaboration with global cybersecurity leadership, engineering teams, and key stakeholders.
  • Oversee and enhance security monitoring, threat detection, and triage capabilities across the Novartis IT ecosystem.
  • Leverage SIEM, advanced analytics, and threat intelligence to identify sophisticated threats and improve detection coverage.
  • Drive improvements in detection engineering, security controls, and capabilities against evolving tactics, techniques, and procedures.
  • Serve as a senior escalation point for complex security incidents involving sophisticated threat actors.
  • Lead critical investigations and response activities, including forensic analysis, containment, stakeholder communication, and remediation.
  • Translate incident findings into actionable recommendations to strengthen organizational cyber resilience.
  • Drive continuous improvement of TDR processes, investigation methodologies, and response playbooks.
  • Collaborate with engineering teams to advance security orchestration, automation, and technology integration.
  • Provide technical mentorship, promote investigation quality, and influence best practices across global TDR teams.

Desired Qualifications

  • Certifications such as CISSP, GCIH, GCFA, or cloud security certifications are preferred.

About the Company

Novartis

Global pharmaceutical company delivering science-based innovations

Novartis is a global pharmaceutical company that uses science-based innovations to develop treatments and improve patient outcomes worldwide. Its products are medicines developed through research and development to address various diseases, aiming to reach nearly 1 billion people. The company differentiates itself by large-scale investment in R&D, a global presence with a diverse workforce, and a clear mission to Reimagine Medicine, focusing on meeting the changing needs of patients. Its goal is to improve quality of life and extend life expectancy by delivering meaningful therapies through its research and development efforts.

Company size
10,001+
Company stage
IPO
Headquarters
Basel, Switzerland
Founded
1970

Recently Posted Jobs

Explore more opportunities at Novartis

See more jobs