Information Security Operations Analyst

Legend Biotech US•Somerset, NJ

9d•$83,711 - $109,870•Hybrid

About The Position

Legend Biotech is seeking an Information Security Operations Analyst to join its Information Technology team in Somerset, New Jersey. The Analyst is a key member of the Information Security Office and operates, tunes, and monitors the company’s security technology stack. The role detects, triages, contains, and reports security events; manages vulnerability, email, endpoint, network, and identity security controls; delivers phishing simulation and awareness activities; and produces operational security metrics aligned with security frameworks and regulatory requirements. The Analyst independently triages alerts, decides when to escalate issues to the Incident Response Manager, and performs first-line containment under established procedures. The role recommends detection tuning, policy changes, and remediation priorities to the Global Manager, Network Security Operations. Changes with broader impact follow change-management procedures. The position also supports security projects, audits, risk assessments, and ongoing program improvements.

Requirements

Baccalaureate or postgraduate degree from an accredited university in Computer Science, Engineering, or a related field.
Related certificates in Information Security.
Five or more years of cybersecurity experience using security tools, including cloud-environment experience.
Experience implementing and configuring security tools.
Experience testing and evaluating security products.
Hands-on SOC experience, including alert triage, investigation, and incident-response support.
Excellent analytical and technical skills.
Professional planning and organizational skills, including presentation and strong written communication.
Ability to communicate technical information in understandable business terms.
Strong interpersonal skills, including teamwork, facilitation, and negotiating skills.
Ability to positively influence peers and build relationships with other teams without direct authority.
Working knowledge of IT-related and compliance mandates such as Sarbanes-Oxley, HIPAA, GDPR, CCPA, PCI DSS, and FDA requirements is desired.
Working knowledge of security frameworks and standards such as NIST, ISO, CIS, and COBIT.
Knowledge of security operations tools and practices, including SIEM, vulnerability scanning, secure email gateways, EDR/XDR, and MDM/UEM.
Knowledge of network and identity technologies, including SWG/ZTNA, directory and cloud identity, SSO, SAML, MFA, conditional access, and PAM/PIM.
Knowledge of DLP concepts and ITSM ticketing.
Scripting experience, such as PowerShell, is a plus.
Applicants must be authorized to work in the United States.

Nice To Haves

Working knowledge of IT-related and compliance mandates such as Sarbanes-Oxley, HIPAA, GDPR, CCPA, PCI DSS, and FDA requirements.
Scripting experience, such as PowerShell.

Responsibilities

Monitor SIEM and alerting platforms; triage, investigate, and escalate alerts; support incident investigations, root cause analysis, and incident reporting.
Tune detection rules, risk scoring, and log sources; maintain collectors, integrations, certificates, and upgrades in coordination with vendors and Infrastructure.
Run scheduled and on-demand vulnerability scans for new servers, software, and changes; report results and track remediation with asset owners.
Administer the secure email gateway, including quarantine, sender and policy rules, threat-alert triage, and email DLP tuning.
Investigate risky sign-ins and suspicious MFA or device registrations; perform containment such as session revocation, MFA resets, and device removal.
Support EDR/XDR, MDM/UEM, secure web gateway, and ZTNA operations, including compliance reviews and policy rollouts.
Design, run, and report on phishing simulations; align content with awareness events and support end-user training.
Remove privileged and security-tool access during offboarding; identify unapproved software and route requests through third-party risk management.
Maintain SOPs, knowledge-base articles, runbooks, monthly operations reports, and leadership metrics.
Support vendor proofs of concept, new security implementations, internal and external audits, annual IT risk assessments, and program enhancements.
Independently triage alerts, determine escalation to the Incident Response Manager, and execute first-line containment within established procedures.
Recommend tuning, policy changes, and remediation priorities to the Global Manager, Network Security Operations; follow change management for broader-impact changes.

Benefits

Performance-based bonus and/or equity for employees in eligible roles.
Medical, dental, and vision insurance.
401(k) retirement plan with a company match that vests fully on day one.
Eight weeks of paid parental leave after three months of employment.
Paid time off that includes vacation, personal time, sick time, floating holidays, and eleven company holidays.
Flexible spending and health savings accounts.
Life and AD&D insurance.
Short- and long-term disability coverage.
Legal assistance.
Supplemental plans, including pet, critical illness, accident, and hospital indemnity insurance.
Voluntary commuter benefits.
Family planning and care resources.
Well-being initiatives.
Peer-to-peer recognition programs.