Principal, Threat Detection & Response

At Johnson & Johnson, we believe health is everything. Our strength in healthcare innovation empowers us to build a world where complex diseases are prevented, treated, and cured, where treatments are smarter and less invasive, and solutions are personal. Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity. Learn more at jnj.com.

As guided by Our Credo, Johnson & Johnson is responsible to our employees who work with us throughout the world. We provide an inclusive work environment where each person is considered as an individual. At Johnson & Johnson, we respect the diversity and dignity of our employees and recognize their merit.

We are seeking a dynamic and experienced Principal, Threat Detection & Response to join our Cyber Defense Operations teams. The ideal candidate will possess a deep understanding of cybersecurity principles, extensive experience in incident response technologies and procedures, and the ability to drive strategic initiatives in a fast-paced environment.

• Continuously monitor security alerts, logs, and threat intelligence feeds.
• Conduct digital forensics investigations, preserve evidence, and analyze incidents.
• Lead incident response efforts, develop response plans, and contain threats.
• Create detailed incident findings and reports, and present them to leadership.
• Mentor and develop team members, fostering a culture of innovation and continuous improvement.
• Participate in regular on-call rotation to monitor, triage, and respond to major security incidents

• Stay updated on the latest threat intelligence and attack techniques.
• Collaborate with IT and backend teams to implement security controls and investigate backend issues.
• Conduct proactive threat hunting to identify hidden threats.

• Evaluate and recommend cybersecurity tools and technologies that enhance incident detection and response capabilities.
• Maintain up-to-date knowledge of industry trends and emerging technologies in cybersecurity automation.

• Work closely with legal, compliance, and executive teams to coordinate security efforts.
• Develop, update, and enforce security policies and procedures.
• Prepare and present incident reports, threat assessments, and strategic recommendations.
• Identify potential risks and gaps in systems and processes to implement solutions to mitigate them.
• Conduct regular assessments and audits of response tools and procedures to ensure effectiveness and compliance with industry standards.

• Establish key performance indicators (KPIs) to measure the effectiveness of incident response services
• Prepare and present regular reports to senior management on the status and strategic impact of incident response services.