Manager, Threat Intelligence Product Security

At Alcon, we are driven by the meaningful work we do to help people see brilliantly. We innovate boldly, champion progress, and act with speed as the global leader in eye care. Here, you'll be recognized for your commitment and contributions and see your career like never before. Together, we go above and beyond to make an impact in the lives of our patients and customers.

We foster an inclusive culture and are looking for diverse, talented people to join Alcon. As a Manager, Threat Intelligence Product Security supporting Research & Development, you will be trusted with technical leadership of the Threat Intelligence function that includes vulnerability identification, verification of patches and ongoing testing, and standardizing technology for medical devices and digital solutions. In this role you will drive the standardization and execution of tools, technologies, testing, and ongoing threat intelligence across Alcon medical devices and digital solutions.

The Manager, Threat Intelligence Product Security should be proficient in understanding industry threats, applicable vulnerabilities, and execution of security testing for Alcon products including hardware, software, user interfaces, and connected devices. In this role, your responsibilities include:

• Building and leading team of product security experts to implement the threat intelligence function and prioritization of vulnerabilities for remediation
• Strong collaboration with cross-functional stakeholders and teams across the product development lifecycle.
• Standardizing security testing from planning, test cases, execution, and reporting addressing end-to-end security for assigned medical device(s) and solution
• Creating security test specifications/clinical security use cases products including applicable regulatory and compliance needs (FDA, MDR, GDPR, HIPAA, etc.)
• Contributing to security test methods, processes, and security development processes etc.
• Contributing to the security program practices including standards, process improvements, automation etc.
• Building and developing common automated test scripts and tools as applicable
• Participating in security requirements development, threat modeling, and technical implementation
• Supporting incident response processes and PSIRT as required in addressing the identified incidents time to time
• Leading, executing and supporting the penetration testing (internal/external), vulnerability testing, patch management etc.,
• Managing bug bounty programs (internal/external) with security leadership guidance
• Presenting threat intelligence program status and results at regular cadence to senior leadership and relevant stakeholders

WHAT YOU'LL BRING TO ALCON:

Key Requirements/Minimum Qualifications:

• Bachelor's Degree or Equivalent years of directly related experience (or high school +13 yrs; Assoc.+9 yrs; M.S.+2 yrs;
• PhD+1 yr)
• The ability to fluently read, write, understand and communicate in English
• 5 Years of Relevant Experience
• 3 Years of Demonstrated Leadership
• Work hours:
• Travel Requirements: Up to 25%
• Relocation assistance: yes
• Sponsorship available: yes

Preferred Qualifications:

• Working knowledge and hands-on experience in security testing
• Experience in the development of security test plans, test cases, execution and reporting
• Experience in product development, IOT, Connected devices or related areas
• Experience in conducting penetration tests.
• Experience in vulnerability scanning including static/dynamic code analysis, infrastructure, web applications etc.
• Medical devices/health care is preferred.
• Knowledge in industry regulations and security standards (e.g. NIST, HIPAA, GDPR, ISO/IEC 27000 series).

HOW YOU CAN THRIVE AT ALCON:

• Collaborate with a growing team of dedicated product security professionals.
• Grow your career while joining Alcon's mission to provide outstanding, innovative products and support to improve sight and improve lives.
• Thrive with Alcon's robust benefits package including health, life, retirement, flexible time off, and much more!

#LI-DNI

Alcon is an Equal Opportunity Employer and participates in E-Verify. Alcon takes pride in maintaining a diverse environment and our policies are not to discriminate in recruitment, hiring, training, promotion or other employment practices for reasons of race, color, religion, gender, national origin, age, sexual orientation, gender identity, marital or veteran status, disability, or any other legally protected status. Alcon is also committed to working with and providing reasonable accommodation to individuals with disabilities. If, because of a medical condition or disability, you need a reasonable accommodation for any part of the application process, or in order to perform the essential functions of a position, please send an email to [email protected] and let us know the nature of your request and your contact information.