SOC T1 Shift Leader
About this opportunity
Career Category
Information Systems
Job Description
Join Amgen’s Mission of Serving Patients
At Amgen, if you feel like you’re part of something bigger, it’s because you are. Our shared mission, to serve patients living with serious illnesses, drives all that we do.
Since 1980, we’ve helped pioneer the world of biotech in our fight against the world’s toughest diseases. With our focus on four therapeutic areas –Oncology, Inflammation, General Medicine, and Rare Disease– we reach millions of patients each year. As a member of the Amgen team, you’ll help make a lasting impact on the lives of patients as we research, manufacture, and deliver innovative medicines to help people live longer, fuller happier lives.
Our award-winning culture is collaborative, innovative, and science based. If you have a passion for challenges and the opportunities that lay within them, you’ll thrive as part of the Amgen team. Join us and transform the lives of patients while transforming your career.
SOC T1 Shift leader
What you will do:
Role Description:
The Sr. Associate, Information Security Operations manages a CSOC Tier 1 (T1) shift as part of a 24/7 Cybersecurity Operations Center (CSOC). This role acts as a technical lead, ensuring alignment with standard operating procedures, analyzing security events, Incidents and contributing to the improvement of cybersecurity processes. Additionally, the Sr. Associate assists in incident response across the lifecycle phases, from response to lessons learned.
Roles & Responsibilities:
Act as a technical lead for the CSOC T1 shift, ensuring alignment with standard operating procedures in investigations and decision-making.
Manage shift prioritization, workload balancing, and real-time coordination
Analyze security events and support deeper investigations by collecting evidence and enriching alerts with contextual information, identifying common tactics, techniques, and procedures used by threat actors.
Improve cybersecurity operations processes, critical metrics, and documentation.
Participate in and optimize CSOC T1 knowledge-sharing and continuous learning initiatives.
Assist incident responders with coordinating the response, containment, eradication, recovery, and lessons learned phases of the incident response lifecycle.
What we expect of you:
We are all different, yet we all use our unique contributions to serve patients.
Basic Qualifications:
Master’s degree Or Bachelor’s degree and 5 to 9 years’ experience in Security Operations or related field
Preferred Qualifications:
Must-Have Skills:
Solid understanding of security technologies and their core functionality
Experience in analyzing cybersecurity threats, with up-to-date knowledge of attack vectors and the threat landscape.
Experience documenting and optimizing information security processes and procedures.
Ability to prioritize tasks and solve problems efficiently in a diverse, global team environment.
Good knowledge of Windows and/or Linux systems, including scripting languages.
Good-to-Have Skills:
Familiarity with 24/7 CSOC operations and incident response lifecycle.
Experience in leading CSOC shifts and implementing cybersecurity improvements.
Professional Certifications:
CompTIA Security+ (preferred)
CEH (preferred)
GSEC (preferred)
MTA Security Fundamentals (preferred)
CISSP (preferred)
Soft Skills:
Strong communication and collaboration skills, particularly when working with global teams.
Ability to manage and prioritize tasks effectively in a high-pressure environment.
Critical thinking and problem-solving abilities, especially in incident response situations.
A commitment to continuous learning and knowledge sharing.
What you can expect of us
As we work to develop treatments that take care of others, we also work to care for your professional and personal growth and well-being. From our competitive benefits to our collaborative culture, we’ll support your journey every step of the way.
In addition to the base salary, Amgen offers competitive and comprehensive Total Rewards Plans that are aligned with local industry standards.
Apply now
for a career that defies imagination
Objects in your future are closer than they appear. Join us.
careers.amgen.com
.
Job details
How this role compares
Computed from every other active Information Technology role in our database, not just this employer's listings.
We currently track 1097 comparable Information Technology roles across 55 biopharma companies.
Salary context
143 of 1097 peers report a salary range (USD, annualized)
Peers share this role's job function. This posting doesn't list a seniority level, so peers aren't narrowed by seniority either -- the range below may span more levels than usual.
Where these roles are based
Top locations among the 1097 comparable roles
+ 23 more countries
Seniority mix
612 of 1097 peers have a known seniority level
Therapeutic area mix
1 of 1097 peers have a known therapeutic area; the rest are genuinely unlabeled, not hidden
Similar opportunities
The closest matches from our peer group, ranked by how similar they are, not how well you'd qualify for them -- treat this as market context, not a guaranteed shortlist; a weak match is labeled as one below.
How we calculate "similar"
No black box, no LLM guesswork: a deterministic score built from four normalized attributes. Here's this role's own peer group at different match levels, so you can see the mechanism, not just the result.
Every comparison starts from the same 100-point budget: 25 for working in the same function, 40 for the same therapeutic area, 20 for the same or adjacent seniority, 15 for the same country. A dimension we can't confirm on both sides contributes nothing, never a guess, never a free pass.
0 points, never a partial guess. A role we know almost nothing about beyond its function bottoms out at 25%; it never inflates to 100% just because there's little to compare against. Seniority uses a defined ladder (Associate → Manager → Associate Director → Senior → Principal → Director → Senior Director → Executive/VP) so "Director" and "Senior Director" count as adjacent, but "Director" and "Executive/VP" do not.