Information Security Operations Analyst

Legend Biotech • Somerset, NJ

9d • Hybrid

About The Position

Legend Biotech is seeking an Information Security Operations Analyst to join its Information Technology team in Somerset, New Jersey. The Analyst is a key member of the Information Security Office and operates, tunes, and monitors the company’s security technology stack. The role detects, triages, contains, and reports security events; manages vulnerability, email, endpoint, network, and identity security controls; delivers the phishing simulation and awareness program; and produces operational security metrics aligned with security frameworks and regulatory requirements.

The Analyst independently triages alerts, determines when to escalate to the Incident Response Manager, and performs first-line containment within established procedures. The Analyst recommends detection tuning, policy changes, and remediation priorities to the Global Manager, Network Security Operations. Changes with broader impact follow change management.

Legend Biotech is a global biotechnology company focused on developing cell therapies for serious diseases. The company collaborates with Johnson & Johnson to develop and commercialize CARVYKTI®.

Requirements

• Baccalaureate degree or postgraduate degree from an accredited university in Computer Science, Engineering, or a related field.
• Five or more years of cybersecurity experience using security tools, including experience in cloud environments.
• Experience implementing and configuring security tools.
• Experience testing and evaluating security products.
• Hands-on SOC experience, including alert triage, investigation, and incident response support.
• Working knowledge of security frameworks and standards, including NIST, ISO, CIS, and COBIT.
• Excellent analytical and technical skills.
• Professional planning and organizational skills, including presentation skills and strong written communication.
• Ability to communicate technical information in understandable business terms.
• Strong interpersonal skills, including teamwork, facilitation, and negotiation.
• Ability to positively influence peers and build relationships with other teams without direct authority.
• Familiarity with security operations technologies such as SIEM, vulnerability scanning, secure email gateways, EDR/XDR, and MDM/UEM.
• Familiarity with network and identity technologies such as SWG/ZTNA, directory and cloud identity, SSO, SAML, MFA, conditional access, and PAM/PIM.

Nice To Haves

• Related information security certificates.
• Working knowledge of IT-related and compliance mandates such as Sarbanes-Oxley, HIPAA, GDPR, CCPA, PCI DSS, and FDA requirements.
• Knowledge of DLP concepts and ITSM ticketing.
• Scripting experience, such as PowerShell.

Responsibilities

• Monitor SIEM and alerting platforms; triage, investigate, and escalate alerts; and support incident investigations, root cause analysis, and incident reporting.
• Tune detection rules, risk scoring, and log sources; maintain collectors, integrations, certificates, and upgrades in coordination with vendors and Infrastructure.
• Run scheduled and on-demand vulnerability scans for new servers, software, and changes; report findings and track remediation with asset owners.
• Administer the secure email gateway, including quarantine, sender and policy rules, threat alert triage, and email DLP tuning.
• Investigate risky sign-ins and suspicious MFA or device registrations; perform containment actions such as session revocation, MFA resets, and device removal.
• Support EDR/XDR, MDM/UEM, secure web gateway, and ZTNA operations, including compliance reviews and policy rollouts.
• Design, run, and report on phishing simulations; align content with awareness events and support end-user training.
• Remove privileged and security-tool access during offboarding; identify unapproved software and route requests through third-party risk management.
• Maintain SOPs, knowledge base articles, runbooks, monthly operations reports, and leadership metrics.
• Support vendor proofs of concept, new security implementations, internal and external audits, annual IT risk assessments, and program enhancements.
• Independently triage alerts, determine escalation to the Incident Response Manager, and execute first-line containment within established procedures.
• Recommend tuning, policy changes, and remediation priorities to the Global Manager, Network Security Operations; ensure broader-impact changes follow change management.

Benefits

• Medical, dental, and vision insurance.
• 401(k) retirement plan with a company match that vests fully on day one.
• Eight weeks of paid parental leave after three months of employment.
• Paid time off that includes vacation, personal, and sick time, floating holidays, and eleven company holidays.
• Flexible spending and health savings accounts.
• Life and AD&D insurance.
• Short- and long-term disability coverage.
• Legal assistance.
• Supplemental insurance plans, including pet, critical illness, accident, and hospital indemnity insurance.
• Voluntary commuter benefits.
• Family planning and care resources.
• Well-being initiatives.
• Peer-to-peer recognition programs.
• Performance-based bonus and/or equity for employees in eligible roles.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level