Senior Associate Endpoint Security Engineer

At AMGEN, Technology isn’t just a support function—it’s a catalyst for discovery, transformation, and real-world impact. Here, your ideas fuel innovation that improves and saves lives of patients in dire need of our medicines. Are you ready to do meaningful work that matters? 

LIVE

What you will do

As an Endpoint Security Senior Associate, you will be a technical engineer for a very diverse endpoint tools. This engineer will play a key role in designing, deploying, and maintaining solutions to build our evolving endpoint protection capabilities, as well as operate, lead, and improve multiple endpoint security technologies. This associate will protect Amgen from threats inside of the company's environment within both the global corporate network and manufacturing environments.

You will operate, manage, and improve Amgen’s endpoint security posture solutions. Within the team, you will identify emerging risks related to endpoint protection, advise management, and develop technical remediations to address those risks. This position will be responsible for the development of processes and procedures for multiple solutions Amgen utilizes to deliver to the promise of a secure digital workplace. They run multiple projects simultaneously to implement and improve the endpoint security protections and use advanced analytics to demonstrate success. This engineer will play a key role in educating technologists and business leaders about the security strategies.

• Works daily alongside the digital workforce experience team to specify, implement, and validate security controls for Amgen’s workstation and mobile platforms.

• In depth experience with Windows (Workstation and Server) and Mac (macOS/iOS) operating systems.

• Designs, operates, maintains, and enhances capabilities for the technical systems that ensure protection of endpoints for Amgen’s global workforce.

• Identifies new risk areas for data and plans controls to mitigate those risks.

• Researches new technologies, processes, and approaches based on industry practices and recommends future plans for secure configurations.

• Authors procedures and guidelines and advises on policies related to workstation and mobile protection requirements and remediation or investigation of violations.

• Develops and conducts training on protection technologies for operations staff. Educates business leadership about data risk.

• Consults other technology groups on endpoint protection strategies and recommends appropriate points of both technical and process integration.

• Partners with the Manager of Endpoint Security to collaborate closely with legal and human resources leadership on violation remediations.

• Collaborates with architecture strategy leaders and business unit leadership to ensure that security by design configurations are incorporated into new business projects.

• Collaborates with Endpoint Security Engineers to integrate protection technology into the operations of traditional Endpoint Detection and Response operations.

WIN

What we expect of you

We are all different, yet we all use our unique contributions to serve patients. The information security professional we seek is a self-starter with these qualifications:

• Master’s degree

• Skill with elements of MDM systems such as Intune, Workspace One, and JAMF on Windows, MacOS and iOS based operating systems.

• Experience implementing secure baselines such as DISA STIGs and CIS Benchmarks.

• Understanding of endpoint technologies from a security perspective including the security risks associated with misconfiguration.

• Familiarity with endpoint security solutions like Traditional Anti-Malware Technologies, Next Generation Anti-Malware, Application Allowlisting, and Endpoint Detection and Response.

• Experience with data analytics in building executive reports.

• Familiarity with one or more security frameworks, especially in regulated environments.

• Proficiency specifying requirements for technical systems, as well as designing, implementing, and operating those systems.

• Expertise in global IT operations, including an understanding of regulatory and cultural differences encountered when dealing with international peers and customers.

• Basic capabilities with programming or scripting languages.

• Experience with project management workstream leadership, preferably using Agile methodology.

• Deep knowledge of the principles of endpoint protection, including availability, integrity, and confidentiality of user devices.

• SANS (GSEC, GCED)

• Systems Security Certified Practitioner (SSCP) or Security+

• Microsoft Certifications (MCSA, MCSD, MCSE)