ABOUT AMGEN :

Amgen harnesses the best of biology and technology to fight the world's toughest diseases, and make people's lives easier, fuller and longer. We discover, develop, manufacture and deliver innovative medicines to help millions of patients. Amgen helped establish the biotechnology industry more than 40 years ago and remains on the cutting edge of innovation, using technology and human genetic data to push beyond what's known today.

ABOUT THE ROLE :

The Senior Manager Information Security, Digital Forensics (DF) leads the DF Hyderabad team within Digital Forensics. This on site leader manages investigators, coordinates with the India office, and works closely with the Security Operations Center (SOC), Tier 2 Security Operations, Incident Response (IR), Legal, Compliance, Privacy, Human Resources (HR), and electronic discovery (eDiscovery) stakeholders. The role is leadership first in addition to performing investigations and eDiscovery. The successful candidate must have the technical judgment to guide investigations, review findings, challenge unsupported conclusions, protect evidence, and support high risk cyber, legal, and HR escalations.

Roles & Responsibilities :

- Lead the Hyderabad DF team, including coaching, performance reviews, career development, workload planning, timekeeping, holiday approvals, and day to day people leadership.

- Operate as the local DF leader for Hyderabad, partnering with the India office and Cybersecurity Operations while escalating high risk decisions at the right time.

- Manage the handoff relationships between DF and the SOC, Tier 2 Security Operations and IR, including triage, escalation, case priority and service expectations.

- Oversee investigations and support activities involving cyber incidents, insider risk, employee matters, eDiscovery, litigation hold, compliance requests, data exposure, unauthorized access, malware, phishing, ransomware, and suspected data exfiltration.

- Partner with Legal, HR, Compliance, Privacy, Cyber Threat Intelligence (CTI), Vulnerability Management Services (VMS), Penetration Testing, Cloud Engineering, Information Technology (IT), and business teams to scope, preserve, review, and report evidence.

- Maintain evidence handling standards for Hyderabad, including authorized scope, chain of custody, hashing, secure storage, encrypted media, access control, case notes, evidence transfer, and cloud based analysis.

- Maintain cloud and Software as a Service (SaaS) forensic readiness across O365 and AWS, preservation workflows, evidence handling and data analysis.

- Guide DF workflow maturity across EnCase, Nuix, FTK, Monolith Pro, Cellebrite, CrowdStrike EDR, IBM QRadar SIEM, O365, AWS, and ServiceNow.

- Advance responsible adoption of automation, AI assisted workflows, and future agentic AI capabilities with controls for approved data use, human review, source validation, audit logging, and least privilege access.

- Review investigation strategy, final reports, and stakeholder communications for accuracy, evidence defensibility, confidentiality, and appropriate language.

- Maintain Standard Operating Procedures (SOPs), playbooks, Key Performance Indicators (KPIs), cross training, tabletop exercises, and report quality review processes to support team growth and operational maturity.

Basic Qualifications :

- Any degree and 12 to 17 years of information security, digital forensics, incident response, cybersecurity operations, cyber investigations, eDiscovery, or related field experience.

- Experience should include at least 3 years leading technical teams, managing technical workstreams, or operating as a site or regional leader in a global cybersecurity environment.

Tech Stack & Skills :

- Leadership of DFIR, cyber investigations, evidence handling, and sensitive Legal, HR, Compliance, and eDiscovery matters.

- Security operations escalation management with SOC, Tier 2 Security Operations, IR, CrowdStrike EDR, IBM QRadar SIEM, O365, AWS, and ServiceNow.

- Hands on or oversight experience with EnCase, Nuix, FTK, Monolith Pro, Cellebrite, Microsoft Purview eDiscovery, AWS forensic workflows, and O365 evidence.

- Experience with scripting and query languages such as Python, PowerShell, Kusto Query Language (KQL), Ariel Query Language (AQL), Structured Query Language (SQL), Sigma, or YARA.

Shift Information :

- This position is based on site in Hyderabad, India. Standard working hours follow the assigned India office schedule. Occasional after hours support may be required for incidents, Legal or HR matters, or global investigations.

EQUAL OPPORTUNITY STATEMENT :

- Amgen is an Equal Opportunity employer and will consider you without regard to your race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, or disability status.

Note : For your candidature to be considered on this job, you need to apply necessarily on the company's redirected page of this job. Please make sure you apply on the redirected page as well.