Associate Director Ddit Isc Detection & Response

.Job Description SummaryThe Threat Detection and Response Associate Director will be an integral part of the Novartis Cyber Security Operations Center (CSOC). The CSOC is an advanced global team passionate about the active defense against the most sophisticated cyber threats and attacks. The Threat Detection and Response Associate Director will leverage a variety of tools and resources to proactively detect, investigate, and mitigate threats impacting Novartis' networks, systems, users, and applications. This role will involve coordination and communication with technical and nontechnical teams, including security leadership and business stakeholders. As an experienced skilled analyst, this role will also involve supervising, coaching, and mentoring a team of junior and senior analysts.Job DescriptionMAJOR ACCOUNTABILITIESIn addition to accountabilities listed above in Job Purpose:Security Monitoring and TriageMonitor in real time security controls and consoles from across the Novartis IT ecosystemCommunicate with technical and non-technical end users who report suspicious activityForensics and Incident ResponseConduct initial investigations into security incidents involving a variety of threatsGather live evidence from endpoint devices and log sources from a variety of systems and applicationsSupport incident response activities including scoping, communication, reporting, and long term remediation planningReview technical reports and escalations for completeness and accuracyBig Data analysis and reportingUtilizing SIEM/Big data to identify abnormal activity and extract meaningful insights