Infrastructure & Endpoint Protection Security Engineer

About this role

Responsibilities

• Ensure stable, secure, and compliant operations across Endpoint Protection and Data Protection solutions, including deployment, lifecycle management, and continuous improvement
• Advocate, implement, and enforce Novartis security standards, policies, procedures across all supported services and technologies.
• Manage services in alignment with approved budgets, ensuring cost control and optimization
• Foster a culture of high performance, accountability, and innovation within Information Security & Compliance
• Manage governance of security exceptions and risk acceptance.
• Collaborate with CSOC to support cybersecurity threat monitoring, detection, and response activities using deployed endpoint protection toolsets, and partner with service lines, platform teams, and application owners to coordinate corrective and preventive actions.
• Oversee global deployment, health, and compliance of endpoint security agents, driving remediation where gaps are identified.
• Lead crisis and incident management activities, engaging internal and external stakeholders as required, own Problem Management, ensuring root cause analysis is completed and preventive measures are implemented to avoid recurrence;
• Drive Service Management and BAU operations, including leadership and oversight of external service providers.
• Lead the creation, maintenance, and continuous improvement of service documentation, runbooks, and operational procedures; ensure adherence to operational procedures, maintaining system integrity, availability, and security.

Requirements

• 5+ years of experience in IT Security Engineering with strong focus on Endpoint Security and Data Protection, and strong background in Security Operations processes, tooling, and service delivery.
• Hands-on experience with Endpoint and Data Protection technologies, including: Microsoft Defender for Endpoint, AV, EDR/XDR, Palo Alto Cortex XDR, BeyondTrust Elevated Privlige Management, Zimperium Mobile Threat Defense, Data Loss Prevention (DLP), Information protection solutions
• Demonstrated ability to identify, assess, and mitigate security risks, build trust, and maintain credibility with business partners.
• Proven stakeholder engagement, presentation, and excellent communication skills across technical and senior leadership levels; effective collaborator with senior management, compliance, architecture, application, infrastructure, and Security Operations teams.
• Clear, structured thinker able to navigate ambiguity, align security solutions to business needs, and drive outcomes.
• Thrives in a fast‑paced, technology‑driven environment, proactively advancing security capabilities, ability to consistently delivers against commitments, deadlines, and competing priorities.
• Desirable requirements:
• Working knowledge of scripting and automation (e.g., PowerShell, Python) to support operational efficiency and automation initiatives.
• ​
• Commitment to Diversity & Inclusion:
• We are committed to building an outstanding, inclusive work environment and diverse teams representative of the patients and communities we serve.
• Why Novartis?
• Our purpose is to reimagine medicine to improve and extend people’s lives and our vision is to become the most valued and trusted medicines company in the world. How can we achieve this? With our people. It is our associates that drive us each day to reach our ambitions. Be a part of this mission and join us! Learn more here:
• https://www.novartis.com/about/strategy/people-and-culture
• Join our Novartis Network:
• If this role is not suitable to your experience or career goals but you wish to stay connected to learn more about Novartis and our career opportunities, join the Novartis Network here:
• https://talentnetwork.novartis.com/network