Senior Manager, Threat Remediation

We are the 1st Hub for Developers! Our motto is “From Developers to Developers”! Our vision is to provide real career opportunities for candidates that want to take the next step in their career. Code.Career is the first process that you will speak with developers (only!) and tech (freak) experts!

Our client, is one of the world’s leading biopharmaceutical companies, dedicated to discovering, developing, and delivering innovative medicines and vaccines that improve and extend patients’ lives. With a presence in more than 100 countries and a history spanning over 175 years, our client combines cutting-edge science, technology, and global expertise to address some of the world’s most challenging healthcare needs. The company fosters a culture of innovation, collaboration, and continuous learning, empowering its people to drive breakthroughs that make a meaningful impact on global health.

Join a global leader in pharmaceuticals, and immerse yourself in a dynamic experience where you’ll contribute to groundbreaking projects that impact the lives of millions!

Key Responsibilities

• Own the threat remediation lifecycle, from intake of identified threats (incidents, alerts, vulnerabilities, control gaps) through containment, mitigation, and closure.
• Translate threat intelligence, SOC findings, red team results, penetration tests, and vulnerability scans into actionable remediation plans.
• Ensure remediation actions are risk‑based, prioritized, and aligned with business impact, regulatory exposure, and threat severity.
• Partner with Incident Response and SOC teams during active incidents to ensure effective containment and eradication strategies.
• Lead post‑incident remediation efforts, ensuring root cause analysis (RCA) is completed and systemic issues are addressed.
• Track and validate completion of corrective and preventive actions (CAPAs) resulting from incidents.
• Work with IT, engineering, and application owners to resolve vulnerabilities while respecting validated system change controls.
• Ensure compensating controls are documented and approved where remediation is constrained due to regulatory or operational limitations.
• Define and report on remediation KPIs and KRIs (e.g., mean time to remediate, overdue critical findings, repeat issues).
• Provide executive‑level reporting on remediation status, risk reduction, and systemic weaknesses.
• Support internal and external audits, regulatory inspections, and security assessments by demonstrating effective remediation governance.
• Partner with detection, threat intelligence, and vulnerability teams to close gaps between detection and remediation.
• Contribute to long‑term cyber defense strategy, including roadmap planning and technology selection.

Required Qualifications

• Bachelor’s degree in Computer Science, Information Security, Engineering, or a related technical discipline, or equivalent experience.
• 7+ years of experience in cybersecurity, with hands-on involvement in remediation, vulnerability management, security engineering, or incident response.
• Demonstrated experience in an agile work environment possessing qualities such as a collaborative mindset, adaptability to change, and a proactive problem-solving approach.
• Leadership experience managing or mentoring analysts and engineers.

Strong understanding of

1. Threat actor tactics, techniques, and procedures (MITRE ATT&CK)
2. Incident response and containment strategies
3. Vulnerability management and remediation workflows
4. Cloud security (AWS, Azure, GCP)
5. Endpoint, network, identity, and application security

Nice-to-Have Skills

• Working knowledge of GxP, FDA 21 CFR Part 11, EMA, HIPAA, GDPR, and other relevant regulations.
• Familiarity with security frameworks, risk management practices, and regulatory expectations relevant to pharmaceutical or life sciences organizations.
• Professional certifications such as CISSP, CISM, GIAC, or equivalent credentials related to security operations or risk management.

Upon further discussion with our client.