Manager, IT Security Engineering

Job Description

At Gilead, we’re creating a healthier world for all people. For more than 35 years, we’ve tackled diseases such as HIV, viral hepatitis, COVID-19 and cancer – working relentlessly to develop therapies that help improve lives and to ensure access to these therapies across the globe. We continue to fight against the world’s biggest health challenges, and our mission requires collaboration, determination and a relentless drive to make a difference.

Every member of Gilead’s team plays a critical role in the discovery and development of life-changing scientific innovations. Our employees are our greatest asset as we work to achieve our bold ambitions, and we’re looking for the next wave of passionate and ambitious people ready to make a direct impact.

We believe every employee deserves a great leader. People Leaders are the cornerstone to the employee experience at Gilead and Kite. As a people leader now or in the future, you are the key driver in evolving our culture and creating an environment where every employee feels included, developed and empowered to fulfil their aspirations. Join Gilead and help create possible, together.

Job Description

Gilead's mission is to discover, develop, and deliver therapies that will improve the lives of patients with life-threatening illnesses worldwide.

We are seeking a dynamic and experienced Security Operations Manager to lead and enhance our cybersecurity operations. This role is ideal for a professional with over five years of experience in cybersecurity, risk management, and incident response. The successful candidate will be responsible for orchestrating threat detection, managing security incidents, and driving continuous improvement across our security infrastructure. This position demands strategic thinking, technical acumen, and a collaborative mindset to safeguard the organization’s digital assets and ensure resilience against evolving threats.

Key Responsibilities

• Work with Security, Risk and Compliance (SRC) stakeholders to determine / define needs and requirements for security capabilities to address business needs and mitigate risk

• Assist with the installation and configuration of technologies being evaluated and document scoring against defined, proof of concept requirements

• Perform research on new technologies and capabilities that may be relevant to SRC requirements

• Document research findings using the Company’s standard templates and present results and recommendations to the SRC leadership team

• Create documentation including test cases and findings reports for POCs and final project implementations

• Create and maintain documentation as part of the project lifecycle

• Assist in formalizing and updating security policies, procedures and technical standards

• Demonstrate a curiosity in multiple security domains

• Provide regular metrics, incident trends and risk posture to senior leadership

• Optimize alerting mechanisms and refine detection logic to improve signal fidelity and reduce noise

• Managing MSP team members on day-to-day support of security tools

• Monitoring and working ticket queue for events and incidents

Technical Skills:

• Expertise in SIEM and EDR tools, such as Crowdstrike and XSIAM.

• Strong knowledge of Microsoft operating systems and popular Linux distributions, including Amazon Linux and RHEL.

• Experience implementing access controls, configuring encryption standards, and executing incident response procedures.

• Working knowledge of Cloud technologies and its implementations in AWS and Azure

• Working knowledge of Active Directory and Entra.

• Expertise in developing scripts in Python etc., for automation.

• Working knowledge of Ar tificial Intelligence, Machine Learning and use of LLM’s.

Compliance & Frameworks:

• Familiarity with compliance frameworks, including MITRE ATT&CK, NIST, and GDPR.

Security Domains:

• Strong understanding of Audit and Monitoring, Risk Response & Recovery, Data Communications, Computer Operations Security, Telecommunications & Network Security, Security Architecture & Models, Endpoint Security, and Cloud Security.

Professional Competencies:

• Must be ready to work in a fast-paced team environment and take direction from senior staff.

• Ability to contribute to SRC’s ongoing projects as assigned.

• Strong verbal and written communication skills, with the ability to adjust information delivery for different audiences.

• Excellent presentation skills and the ability to document technical solutions with clarity and proper organization.

• Highly organized, results-oriented, attentive to detail, and able to manage multiple priorities.

• Proven analytical and problem-solving skills.

• Self-motivated, proactive, independent, and responsive.

• Ability to build working relationships with partners, peers, and senior management.

• Flexible and able to perform other duties as assigned.

Basic Qualifications:

Bachelor of Science degree in management information systems, computer science, engineering or other IT-related major with 6+ years of industry experience OR

Masters of Science degree in management information systems, computer science, engineering or other IT-related major with 4+ years of industry experience

People Leader Accountabilities:

•Create Inclusion - knowing the business value of diverse teams, modeling inclusion, and embedding the value of diversity in the

way they manage their teams.

•Develop Talent - understand the skills, experience, aspirations and potential of their employees and coach them on current

performance and future potential. They ensure employees are receiving the feedback and insight needed to grow, develop and

realize their purpose.

•Empower Teams - connect the team to the organization by aligning goals, purpose, and organizational objectives, and holding

them to account. They provide the support needed to remove barriers and connect their team to the broader ecosystem.

The salary range for this position is:

Raleigh: $126,565.00 - $163,790.00.

Bay Area: $146,540.00 - $189,640.00.

Gilead considers a variety of factors when determining base compensation, including experience, qualifications, and geographic location. These considerations mean actual compensation will vary. This position may also be eligible for a discretionary annual bonus, discretionary stock-based long-term incentives (eligibility may vary based on role), paid time off, and a benefits package. Benefits include company-sponsored medical, dental, vision, and life insurance plans*.

For additional benefits information, visit:

* Eligible employees may participate in benefit plans, subject to the terms and conditions of the applicable plans.

For jobs in the United States:

Gilead Sciences Inc. is committed to providing equal employment opportunities to all employees and applicants for employment, and is dedicated to fostering an inclusive work environment comprised of diverse perspectives, backgrounds, and experiences. Employment decisions regarding recruitment and selection will be made without discrimination based on race, color, religion, national origin, sex , age, sexual orientation, physical or mental disability, genetic information or characteristic, gender identity and expression, veteran status, or other non-job related characteristics or other prohibited grounds specified in applicable federal, state and local laws. In order to ensure reasonable accommodation for individuals protected by Section 503 of the Rehabilitation Act of 1973, the Vietnam Era Veterans' Readjustment Act of 1974, and Title I of the Americans with Disabilities Act of 1990, applicants who require accommodation in the job application process may contact [email protected] for assistance.

For more information about equal employment opportunity protections, please view the 'Know Your Rights' poster.

Gilead Sciences will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, (c) consistent with the legal duty to furnish information; or (d) otherwise protected by law.

Our environment respects individual differences and recognizes each employee as an integral member of our company. Our workforce reflects these values and celebrates the individuals who make up our growing team.

Gilead provides a work environment free of harassment and prohibited conduct. We promote and support individual differences and diversity of thoughts and opinion.

For Current Gilead Employees and Contractors:

Please apply via the Internal Career Opportunities portal in Workday.