Cencora, previously known as AmerisourceBergen, is a leading global pharmaceutical solutions organization centered on improving lives. Ranked #21 on the Global Fortune 500, our team members are united in our responsibility to create healthier futures.
Our Shared Service Center in Lithuania is experiencing rapid growth and we have many diverse and exciting roles in Customer Service, Operations, IT, Finance and HR. Join us and make a positive impact on human and animal health.
What you will be doing
As a Cyber Security Operations Lead Engineer you will play a pivotal role in our organization's cybersecurity efforts. You will be responsible for leading and executing strategic initiatives supporting complex cyber security operations and Incident Response initiatives to safeguard our systems and networks against advanced threats. Working closely with cross-functional teams, you will provide expert-level guidance to junior analysts and other teams within the organization.
PRIMARY DUTIES AND RESPONSIBILITIES:
Supports SOC Lead team and develops strategic objectives to continuously improve and transform the Continuous Security Operations, Threat Hunting, Digital Forensics, and Incident Response servicesLeads cyber incident response engagements as a senior incident response leaderServes as a backup to the Continuous Security Operations Regional ManagerSupport Continuous Security Operations colleagues with complex and comprehensive event and incident analysisCollaborates with Cyber Engineering, Vulnerability Management, Threat Intelligence, Attack Surface Reduction, Data Protection and Enterprise IT to elevate Cencora's security posture to next level of maturityFocuses on developing the Continuous Security Operations services further towards maturity and automation.Trains, educates, and adds technical skills to existing team membersPrepares and participates in internal incident response exercises and drills.Develops, reviews, follows, and implements new runbooks and standard operating procedures for Cyber Operations activitiesPrepares threat models, incident response action plans and "post-mortem" incident reports
What your background should look like
EXPERIENCE, SKILLS AND EDUCATIONAL REQUIREMENTS:
Must have:
A Degree in Cybersecurity, Risk Analysis, Computer Science, Information Systems or other related field, or equivalent work experience8-10 years of combined IT and security work experience with a broad range of exposure to cybersecurity functionsHands-on extensive experience and proficiency performing cyber security investigations with the following security tool categories: SIEM, EDR, Email Security Gateway, SOAR, Firewall, Anti-virusDeep understanding of cyber security industry frameworks (e.g. MITRE ATT&CK, D3FEND, NIST, Cyber Killschain, etc.)Experience in Python, PowerShell, Bash or any other scripting languagesExcellent written communication skills, with a focus on translating technically complex issues into simple, easy-to-understand concepts in EnglishExceptional analytical, interpersonal, and problem-solving skillsExperience in tuning, and assessment of security detection policies in cyber toolsExperience in leading and orchestrating major incident breach response activities.Ability to develop new, and follow existing operating procedures and runbooksHighly skilled in technical incident report writing and maintenance of document and evidence repositoriesDemonstrated ability to manage multiple Data Security, Cybersecurity, and Cloud Security solutionsExpertise in one or more of the following functional areas: Digital Forensics, Threat Hunting, Incident Response
Nice to have:
Fluency in other languages i.e. Turkish; Spanish; French; Lithuanian;Security certification (i.e. GCIH, Certified Information Systems Security Professional (CISSP) or equivalent)Experience with exploratory data analysis, deep manual log analysis, Python libraries for data analysis and Jupyter NotebooksExperience in developing cybersecurity tabletop scenariosPrior experience in developing detection rules, SOAR playbooks, and project management experience
#LI-Hybrid #LI-AP1
What Cencora offers
We offer a competitive annual bonus, life insurance from Day 1, a best-in-class health insurance package, and up to 6 fully paid benefit days a year. As a Cencora employee, you have the benefit of our referral bonus scheme, our boundless learning opportunities and our global Employee Assistance Program. We have a wonderful office location in Quadrum, equipped with everything you need for a small break at work and fresh snacks at all times. Become part of our purpose-driven, multicultural team now and help us create healthier futures.
Schedule
Full time
Gross Salary Range (Monthly)
€5,178.53 - €7,397.95
Affiliated Companies:
Affiliated Companies: World Courier (Lithuania) UAB