Senior Cloud Security Engineer

Job Description

AstraZeneca is a global, science-led biopharmaceutical business which innovative medicines are used by hundreds of millions of patients worldwide. Our IT strategy is passionate about being Smarter, Faster, and Leaner, and we are looking for a Senior Cloud Security Engineer to play an active part in helping make this strategy a reality.

Cybersecurity is key to our IT strategy, as we move towards our objectives we are looking for Individuals who:

• Focus on innovation to maintain a sustainable risk position against the evolving threat landscape.
• Understand that we could be working against organized crime syndicates or state-sponsored attackers.
• Understand attackers' motivations and their ways of working.

In this role you will operate within AstraZeneca's global cybersecurity organization. You will collaborate and influence multiple functions across a global organization spanning China, India, Mexico, Sweden, US, and UK.

Accountabilities (You will ...)

• Engineer cybersecurity solutions spanning cloud, on-premises, and third-party collaboration environments, with a predominant focus on cloud and data.
• Collaborate with other teams in performing, assessing, and evolving IT processes that intersect any of our cybersecurity priorities.
• Map governance and compliance frameworks and their controls to technical implementation, implementing security measures early in the development process.
• Leverage understanding of threats, weaknesses, and vulnerabilities around cloud and data to assist other areas in responding promptly and effectively to contain breaches or to address areas of concern.

Desired Skills (You can ...)

• Identify and articulate architectural trade-offs.
• Embed process, governance and security into workflow and technology.
• Design and implement software tools and services using modern programming languages.
• Manage and lead projects delivering prioritised initiatives at challenging deadlines.
• Exert positive influence in a matrixed organization to drive technology evolution.
• Drive efforts to achieve process and technology improvement at scale.

Qualifications (You have ...)

• Must have broad enterprise IT experience with significant cloud and data exposure.
• Must have in-depth understanding of security and networking protocols, cryptography, and modern authentication and authorization protocols.
• Must have experience designing, deploying, and operating secure networks, systems, application and security architectures at scale.
• Must have experience configuring and managing cloud security services in an AWS organization at scale.
• Must have experience researching, designing, and implementing security policies, standards, and procedures, including those in cybersecurity frameworks such as MITRE ATT&CK, NIST CSF, NIST SP.800-53, and NIST SP.800-61, as well as implementing cloud security reference architectures.
• Should have experience working in a software development and systems administration organization, implementing DevSecOps and process automation.
• Should have the ability to conduct post-mortem on security incidents and take post-mortem data to drive uplift in policies, procedures, standards.

Location: Guadalajara (hybrid - Expectation of working in the office 3 days a week)

When we put unexpected teams in the same room, we unleash bold thinking with the power to inspire life-changing medicines. In-person working gives us the platform we need to connect, work at pace and challenge perceptions. That's why we work, on average, a minimum of three days per week from the office. But that doesn't mean we're not flexible. We balance the expectation of being in the office while respecting individual flexibility.

Why AstraZeneca?

At AstraZeneca when we see an opportunity for change, we seize it and make it happen, because any opportunity no matter how small, can be the start of something big. Delivering life-changing medicines is about being entrepreneurial - finding those moments and recognising their potential. Join us on our journey of building a new kind of organisation to reset expectations of what a bio-pharmaceutical company can be. This means we're opening new ways to work, pioneering groundbreaking methods and bringing unexpected teams together.

So, what's next!

Are you already imagining yourself joining our team? Good, because we can't wait to hear from you. Apply now to join our innovative team!

Where can I find out more?

• Follow AstraZeneca on LinkedIn: www.linkedin.com/company/1603/

AstraZeneca is an equal opportunity employer. AstraZeneca will consider all qualified applicants for employment without discrimination on grounds of disability, sex or sexual orientation, pregnancy or parental leave status, race or national or ethnic origin, age, religion or belief, gender identity or re-assignment, marital or civil partnership status, protected veteran status (if applicable) or any other characteristic protected by law. AstraZeneca only employs individuals with the right to work in the country/ies where the role is advertised.

AstraZeneca embraces diversity and equality of opportunity. We are committed to building an inclusive and diverse team representing all backgrounds, with as wide a range of perspectives as possible, and harnessing industry-leading skills. We believe that the more inclusive we are, the better our work will be. We welcome and consider applications to join our team from all qualified candidates, regardless of their characteristics. We comply with all applicable laws and regulations on non-discrimination in employment (and recruitment), as well as work authorization and employment eligibility verification requirements.