Lead Cyber Threat Hunter

At Johnson & Johnson, we believe health is everything. Our strength in healthcare innovation empowers us to build a world where complex diseases are prevented, treated, and cured, where treatments are smarter and less invasive, and solutions are personal. Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity. Learn more at https://www.jnj.com

Job Function:
Technology Enterprise Strategy & Security

Job Sub Function:
Security & Controls

Job Category:
Scientific/Technology

All Job Posting Locations:
Boston, Massachusetts, United States of America, Houston, Texas, United States of America, Minneapolis, Minnesota, United States of America, New York, United States of America, Orlando, Florida, United States of America, Raritan, New Jersey, United States of America, SAN ANTONIO, Texas, United States of America, San Diego, California, United States of America, Seattle, Washington, United States of America, Washington, District of Columbia, United States of America

Job Description:

Johnson & Johnson is recruiting a Lead, Cyber Threat Hunter to focus on technical hunt activities within the Cyber Threat Intelligence and Threat Hunt (CIH) team. This role will support the Cyber Defense organization located in Raritan, NJ or can work remotely in the USA.

At Johnson & Johnson, we believe health is everything. Our strength in healthcare innovation empowers us to build a world where complex diseases are prevented, treated, and cured, where treatments are smarter and less invasive, and solutions are personal. Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity. Learn more at https://www.jnj.com/.

If you have the talent and desire to touch the world, Johnson & Johnson has the career opportunities to help make it happen!

Position Summary

Are you driven by a sense of purpose? We are focused, driven, and dedicated to providing premier intelligence capabilities. On the Cyber Threat Intelligence and Threat Hunt team, we continually improve our intelligence capabilities by investing in our people.

Responsibilities include but are not limited to:

• Protect J&J networks through the proactive identification of emerging threats and detection gaps.
• Conduct hunt activities focused on identifying and neutralizing threats to the organization.
• Conduct baselining activities to develop a deeper understanding of tools, data sources, and activity in the network.
• Grow model-assisted threat hunting capabilities using machine-learning to identify hard-to-find threats.
• Analyze adversary activity and communicate findings to partner teams to contribute to time sensitive missions to help stop breaches.
• Work with the detection engineering team to turn high fidelity hunt queries into permanent detections.

Required Qualifications

• A minimum of a bachelor's degree or equivalent related experience.
• A minimum of 5 years of professional experience.
• A minimum of 3 years of experience collecting security events or responding to computer security incidents.
• A solid grasp of the current threat landscape including the latest tactics, tools, and procedures, and common malware variants.
• Experience assessing cyber threat intelligence and turning it into actionable hunt queries and activities.
• Experience using common tools for security event analysis, incident response, computer forensics, malware analysis, or other areas of security operations is required (e.g. endpoint, network telemetry, and event data collection and analysis tools).
• A strong grasp of how Windows, MacOs, and Linux operating systems function.

Preferred Qualifications

• Working knowledge of Network Protocols and experience conducting NetFlow analysis to identify anomalies.
• An understanding of administrative tools and how adversaries may use them to live-off-the-land is preferred.
• Experience working with detection engineering teams to create detection analytics and tune out false positives.
• Knowledge of programming and scripting languages such as Python, PowerShell, Bash, and/or Kusto Query Language is preferred.
• The ability to convey complex or difficult technical concepts to audiences with varying levels of technical ability is preferred.
• Security certifications such as SANS GFNA, GCFA, and GCIA or similar industry-recognized credentials are preferred.
• Experience working with virtual, global teams - including diverse groups of people with multifaceted backgrounds and cultural experience is preferred.
• This role may require up to 10% travel.

This is a remote role available in the US. While specific cities are listed in the Locations section for reference, please note that they are examples only and do not limit your application. We invite candidates from any location across the country to apply.

Johnson & Johnson is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability, protected veteran status or other characteristics protected by federal, state or local law. We actively seek qualified candidates who are protected veterans and individuals with disabilities as defined under VEVRAA and Section 503 of the Rehabilitation Act.

Johnson and Johnson is committed to providing an interview process that is inclusive of our applicants' needs. If you are an individual with a disability and would like to request an accommodation, please email the Employee Health Support Center (ra-employeehealthsup@its.jnj.com) or contact AskGS to be directed to your accommodation resource.

#LI-remote

The anticipated base pay range for this position is :
$91,000 to $147,200.

Additional Description for Pay Transparency:
The Company maintains highly competitive, performance-based compensation programs. Under current guidelines, this position is eligible for an annual performance bonus in accordance with the terms of the applicable plan. The annual performance bonus is a cash bonus intended to provide an incentive to achieve annual targeted results by rewarding for individual and the corporation's performance over a calendar/performance year. Bonuses are awarded at the Company's discretion on an individual basis. Employees and/or eligible dependents may be eligible to participate in the following Company sponsored employee benefit programs: medical, dental, vision, life insurance, short- and long-term disability, business accident insurance, and group legal insurance. Employees may be eligible to participate in the Company's consolidated retirement plan (pension) and savings plan (401(k)). Employees are eligible for the following time off benefits: Vacation - up to 120 hours per calendar year Sick time - up to 40 hours per calendar year; for employees who reside in the State of Washington - up to 56 hours per calendar year Holiday pay, including Floating Holidays - up to 13 days per calendar year of Work, Personal and Family Time - up to 40 hours per calendar year Additional information can be found through the link below. https://www.careers.jnj.com/employee-benefits The compensation and benefits information set forth in this posting applies to candidates hired in the United States. Candidates hired outside the United States will be eligible for compensation and benefits in accordance with their local market.