Senior Analyst, OT Security Engineering

Johnson & Johnson • Raritan, NJ

6d

About The Position

At Johnson & Johnson, we believe health is everything. Our strength in healthcare innovation empowers us to build a world where complex diseases are prevented, treated, and cured, where treatments are smarter and less invasive, and solutions are personal. Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity. Learn more at https://www.jnj.com/ . About Innovative Medicine Our expertise in Innovative Medicine is informed and inspired by patients, whose insights fuel our science-based advancements. Visionaries like you work on teams that save lives by developing the medicines of tomorrow. Join us in developing treatments, finding cures, and pioneering the path from lab to life while championing patients every step of the way. Learn more at https://www.jnj.com/innovative-medicine We are searching for the best talent for Senior Analyst, Operational Technology Cybersecurity Engineering .

Requirements

• A Bachelor's Degree or equivalent experience in the Information Security or Information Technology Sector
• Tanium Certified Administrator with extensive experience managing large-scale deployments.
• Strong understanding of Tanium SaaS architecture and operational workflows.
• Hands-on scripting and automation skills (e.g., Python, PowerShell, Bash) for building integrations, automating workflows, and extending platform functionality.
• Strong foundation in information security principles , with proven ability in debugging and root cause analysis in mixed IT/OT environments.
• Experience engineering, installing, configuring, and operating security solutions and appliances across large-scale, hybrid environments (AWS, Azure, GCP, on-prem).
• Ability to engineer, customize, and extend endpoint management and visibility platforms , including developing integrations, automation, and product-level enhancements.
• Familiarity with agile frameworks and DevSecOps practices , with the ability to deliver iteratively while maintaining reliability in high-risk environments.
• Proven track record leading complex implementations , demonstrating risk-aware problem solving and balancing security with operational continuity.
• Strong communication skills (written and verbal) , able to translate technical details into clear guidance for both technical and non-technical stakeholders.
• Knowledge of security frameworks and standards (NIST CSF, CIS Controls, OWASP, SANS) and ability to apply them pragmatically.
• Working knowledge of the MITRE ATT&CK framework , including TTPs, and ability to map telemetry to adversary behaviors.
• Experience collaborating with distributed, global teams, working effectively across diverse cultural and technical backgrounds.

Nice To Haves

• Communication
• Corrective and Preventive Action (CAPA)
• Critical Thinking
• Information Security Auditing
• Information Security Management System (ISMS)
• Information Technology (IT) Security Assessments
• Information Technology Strategies
• Mentorship
• Network Optimization
• Presentation Design
• Process Optimization
• Report Writing
• Security Policies
• Technical Credibility
• Technologically Savvy
• Training People
• Vulnerability Assessments

Responsibilities

• Oversee the design and lifecycle management of Tanium SaaS and related services.
• Define and implement strategies for platform performance, security hardening, and automation.
• Validate data flows and integration points to maintain accuracy and compliance.
• Act as the technical authority for Tanium capabilities and provide guidance on best practices.
• Collaborate with security and infrastructure teams to align Tanium operations with enterprise objectives.
• Maintain documentation and ensure adherence to regulatory and change management processes.
• Drive integrations and automation between different IT/OT technologies.
• Support Cybersecurity workflows, to assess risk, increase visibility and reduce impact of vulnerabilities across the IT/OT environments.
• Test and validate security controls throughout the different phases of the Cyber Kill Chain, and the MITRE ATT&CK framework to prevent, detect, and respond.
• Generate innovative threat behavior analytics for discovering historical and emerging threats to networks and systems.
• Implement detection strategies based on internal and external intelligence reporting and vulnerability research.
• Perform administrative tasks associated with tuning, alerts, correlation rules, signatures, device configurations, patching, and upgrades.
• Establish and maintain relationships with the suppliers, vendors, and partners.
• Assists with security events/incidents, coordinating activities with the CSOC and others – as needed.

Benefits

• employees are eligible to participate in the Company’s consolidated retirement plan (pension) and savings plan (401(k)).
• This position is eligible to participate in the Company’s long-term incentive program.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 5,001-10,000 employees