Senior Analyst, Operational Technology Cybersecurity Engineering

OverviewSenior Analyst, Operational Technology Cybersecurity Engineering.Location options: Warsaw, Poland or São José dos Campos, Brazil.Part of the Information Security and Risk Management (ISRM) organization.Key ResponsibilitiesOversee the design and lifecycle management of Tanium OT and related services.In-depth experience in Patch, Deploy and Enforce modules.Define and implement strategies for platform performance, security hardening, and automation.Validate data flows and integration points to maintain accuracy and compliance.Act as the technical authority for Tanium OT capabilities and provide guidance on best practices.Collaborate with security and infrastructure teams to ensure platform reliability and adherence to operational standards.Maintain validated documentation and ensure adherence to regulatory and change management processes.Drive integrations and automation between different OT technologies.Support Cybersecurity workflows, to assess risk, increase visibility and reduce impact of vulnerabilities across the OT environments.Test and validate security controls throughout the different phases of the Cyber Kill Chain, and the MITRE ATT&CK framework to prevent, detect, and respond.Generate innovative threat behavior analytics for discovering historical and emerging threats to networks and systems.Implement detection strategies based on internal and external intelligence reporting and vulnerability research.Perform administrative tasks associated with tuning, alerts, correlation rules, signatures, device configurations, patching, and upgrades.Establish and maintain relationships with the suppliers, vendors, and partners.Assist with security events/incidents, coordinating activities with the CSOC and others – as needed.QualificationsBachelor's degree or equivalent experience in information security or information technology.Tanium Certified Administrator with extensive experience managing large-scale deployments.Strong understanding of Tanium SaaS architecture and operational workflows.Strong foundation in information security principles, with proven ability in debugging and root cause analysis in OT environments.Experience engineering, installing, configuring, and operating security solutions and appliances across large-scale, hybrid environments (AWS, Azure, GCP, on-prem).Ability to engineer, customize, and extend endpoint management and visibility platforms, including developing integrations, automation, and product-level enhancements.Familiarity with agile frameworks and DevSecOps practices, with the ability to deliver iteratively while maintaining reliability in high-risk environments.Proven track record leading complex implementations, demonstrating risk-aware problem solving and balancing security with operational continuity.Strong communication skills (written and verbal), able to translate technical details into clear guidance for both technical and non-technical stakeholders.Knowledge of security frameworks and standards (NIST CSF, CIS Controls, OWASP, SANS) and ability to apply them pragmatically in OT contexts.Working knowledge of the MITRE ATT&CK framework, including OT-specific TTPs, and ability to map telemetry to adversary behaviors.Experience collaborating with distributed, global teams, working effectively across diverse cultural and technical backgrounds.Johnson & Johnson is an Affirmative Action and Equal Opportunity Employer.All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, or protected veteran status and will not be discriminated against on the basis of disability.#J-*****-Ljbffr