Edwards Lifesciences is expanding its global technology capabilities with the launch of a new IT Innovation Hub in Pune, India. The Hub strengthens the technology foundation that supports our business worldwide, working in close partnership with teams across regions to deliver reliable, high-quality solutions at scale.Designed as a long-term investment, the Pune Hub will advance newer digital capabilities such as automation, data, AI, and cloud, and will include roles spanning end user services, application development, and enterprise platform teams.Together, these teams will help Edwards operate more efficientlyand accelerate innovation in support of our mission of advancing patient care.As an Edwards Sr. Analyst for Information Security, you will contribute with protecting Edwards organization, applications, and products by leading complex incident investigations, designing and operationalizing detection use cases, driving threat hunting and incident response operations. You'll serve as a Tier 2 escalation point within our 24x7 Detection & Response team and partner with detection engineering, threat intel, and IT teams to mature our security operations. Ideal candidates bring deep incident response experience, hands-on detection engineering skills, and the judgment to drive outcomes independently. How will you make an impact:Serve as key escalation tier (level 2 analyst) for on-call incident response resourcesPerform complex investigations as a part of Edwards active security monitoring and threat hunting operations within SLAsDrive and design response and remediation actions to protect against security threats in Edwards environments and productsLead the design, testing and implementation of detection use cases to productionHelp drive threat hunting programDrive and develop our incident response programResponsible for operations and maintenance of key cyber security capabilities and services in Detection Response area – SIEM (Google SecOps, Splunk, Qradar etc)Design automation workflows to streamline detection and response effortsParticipate in CIRT team effortsProvide coaching, mentoring, and knowledge transfer to other team membersDocument and maintain incident response technical playbooks and incident timelinesStaying informed on the evolving cybersecurity threat landscape to drive innovative detections, threat hunts, and automations to drive Edwards’ security postureWhat you'll need (Required):Bachelor's Degree in related field with 5+ years of previous related experience, or equivalent work experience based on Edwards criteriaWhat else we look for (Preferred):Previous related experience in Information Security SOC, CIRT or SIEM teamsParticipation and leading information security incident handling effortsProvide and build detailed investigation timelines including documentation, improvements, and recommended action itemsExpert with Google SecOps or other SIEM solutions (Splunk, Qradar etc)Experience with SOAR platforms operations (Torq, PaloAlto XSOAR etc)Experience with threat hunting operations and/or designDemonstrated experience writing and tuning detection logicProficiency with at least one query language (CQL/LogScale, KQL, SPL, or equivalent)Certifications in related discipline preferred (e.g., GCIH, GCDA etc)Expert of IR concepts, data tuning, SIEM, forensics, cloud monitoringKnowledge of common attack vectors and methods, MITRE frameworkScripting experience preferredProficient analytical and problem-solving abilities to identify and mitigate potential security risksStrict attention to detailAbility to partner with other information security and IT experts for escalation of security alerts and onboarding log sourcesSubstantial understanding of troubleshooting techniques with the ability to adapt and learn new technologiesAbility to provide guidance to assigned teams on implementing information security standards and designsExcellent organization and time management skillsExcellent verbal and written communication skillsRecruiting scam alert: Read our notice about potential recruiting scams.