Specialist Data Security Engineer

*What you will do*

In this vital role the Specialist Data Security Engineer covering Data Loss Prevention (DLP) and Cloud Access Security Broker (CASB) technologies. This role will report to the Manager, Data Security. This position will provide essential services that enable us to better pursue our mission.

Specialist Data Security Engineers operate, manage, and improve Amgens DLP and Cloud Access Security Broker (CASB) solutions. In our Data Security team, they will identify emerging risks related to changes in cloud technologies, advise management, and develop technical remediations to address those risks. Specialists lead the development of processes and procedures for multiple solutions which enable business units to remediate identify cloud data exposures. They run multiple projects simultaneously to implement and improve the cloud data security protection and use advanced analytics to demonstrate success.

This engineer will play a key role in educating and evangelizing to technologists and business leaders the security strategies that both protect and enable business processes related to cloud data handling.

*Roles & Responsibilities:*

• Designs, operates, maintains, and enhances capabilities for the technical systems that ensure protection of data for all Amgen global operations.
• Identifies new risk areas for data and plans controls to mitigate those risks.
• Researches new technologies, processes, and approaches based on industry practices and recommends future plans for data protection.
• Authors procedures and guidelines and advises on policies related to data protection requirements and remediation or investigation of violations.
• Develops and conducts training on data protection technologies for operations staff. Educates business leadership about data risk.
• Advises other technology groups on data protection strategies and recommends appropriate points of both technical and process integration.
• Partners with the Manager of Data Security to liaise to legal and human resources leadership on violation remediations.
• Collaborates with cloud strategy leaders and business unit leadership to ensure that cloud data protection is incorporated by design into new business projects.
• Collaborates with Cloud Security Engineers to integrate cloud data protection technology into the operations of traditional Data Loss Prevention operations.

Basic Qualifications:

Masters degree and 4 to 6 years of experience OR

Bachelors degree and 6 to 8 years of experience OR

Diploma and 10 to 12 years of experience.

*Functional Skills:*

Must-Have Skills

• Familiarity with one or more security frameworks, especially in regulated environments.
• Proficiency specifying requirements for technical systems, as well as designing, implementing, and operating those systems.
• Expertise in global IT operations, including an understanding of regulatory and cultural differences encountered when dealing with international peers and customers.
• Demonstrated competence maintaining applications on Windows and Linux based operating systems, and basic understanding of one or more programming or scripting languages.
• Demonstrated proficiency with one or more Cloud Access Security Platforms (Elastica, Netskope, SkyHigh,etc)
• Track record of project management leadership, preferably using Agile methodology.
• Deep knowledge of the principles of Data Protection, including availability, integrity, and confidentiality of data.

*Good-to-Have Skills:*

• Proficiency with communications focused on both the development of written technical processes and the ability to convey complex ideas clearly in front of an audience.
• Experience with data analytics focused on building executive reports
• Reputation of successfully navigating large enterprise environments, understanding both ITIL driven processes and business relationship building
• Ability to self-direct work on multiple priorities with little to no oversight, based on critical initiatives.

Professional Certifications (please mention if the certification is preferred or required for the role):

• Systems Security Certified Practitioner (SSCP) or Security+
• SANS Certifications
• Cloud security certifications
• Relevant vendor-specific certifications

*Soft Skills:*

• Established analytical and gap/fit assessment skills.
• Ability to work effectively with global, virtual teams
• High degree of initiative and self-motivation.
• Ability to manage multiple priorities successfully.
• Team-oriented, with a focus on achieving team goals
• Effective presentation and public speaking skills.