Spec, IT Security

About Us: Baxter´s mission
Our products and therapies touch the lives of millions of people around the world every day, which is why we are focused on transformative innovations that bring smarter, more personalized care to all of us. For 87 years and counting, we have been at the critical intersection where the ideas that save and sustain lives meet the providers who make it all happen. And now, we are determined to realize our boldest opportunities to transform global healthcare for years to come.

Your role at Baxter
Nothing changes if nothing changes, which is why Baxter is transforming our global IT function—into one that will strengthen partnerships and enable smarter, more efficient and connected business processes. In the dynamic healthcare industry, we need to be ready to face new challenges and opportunities. As we learn, we must be agile and innovative to reveal new ways of working. Technology and our digital capability will help create a more efficient and innovative ecosystem to enable our employees, customers, and products to drive better outcomes for patients worldwide.  
We are at the critical intersection where robust IT infrastructure and networking support meets the physicians, nurses and care givers who save and sustain lives. Together, we can build upon Baxter’s rich heritage to advance the next generation of transformative healthcare innovations. Together, we can change how IT meets healthcare. Together, we are Baxter. 
This is where technology fuels purpose-driven work. Where your purpose accelerates our mission.

The primary purpose of this position is to monitor and address security alerts in a fast paced global environment. Core processes include triage, investigation, containment and escalation of incidents based on their severity. This position requires shift work and on-call duties in support of 24x7 coverage for global security monitoring and incident response. Overtime could be necessary to support activities during a major incident. 

Your team
The Global Information Technology Centers are focused on being a stronger business partner, aligned to deliver on the technology needs and maintaining global support and shared expertise to advance digital capabilities across the enterprise. Our IT function is made up of employees with varied backgrounds and knowledge. This diversity of skills and expertise allows us to bring creative and innovative solutions

What you'll be doing
•    Monitor core security platforms throughout the shift and triage alerts quickly and consistently 
•    Investigate alerts and execute containment and remediation actions to ensure that problems are fully resolved or escalated as needed 
•    Execute threat hunts to uncover malicious activity that may have gone undetected by automated security alerting 
•    Support the collection and analysis of internally and externally sourced threat intelligence 
•    Support major security incident management by addressing data collection, analysis and communications requirements on a global scale 
•    Document incidents, investigation actions and lessons learned to support continuous improvement within the team 
•    Support additional engineering, operations and IT security projects as requested by management 

What you'll bring
•    5+ years of experience with security monitoring, triage and incident handling 
•    Bachelor's degree in Computer Science, a related field or equivalent demonstrated experience and knowledge 
•    Demonstrated skill operating security tools including Email, endpoint, web, network and cloud 
•    Security Incident and Event Management (SIEM) and ticket management experience required 
•    Familiar with enterprise IT processes for asset, configuration, change, incident and problem management 
•    Familiar with the normal operation of common network communication protocols, authentication processes and logging capabilities of modern platforms to identify and resolve security events 
•    Industry certifications nice to have: OSCP, GCIH, GCIA, GCFE, GREM, GCFA, GSEC, CEH, CISSP, CISM