Cyber Defense Center Senior Security Engineer

Join a Market Leader

About Hovione

At Hovione, we help partners turn scientific innovation into medicines that reach patients around the world. For more than 65 years, we have connected science, technology, and manufacturing to scale complex ideas into high-quality and innovative solutions that truly make a difference.

As an international Contract Development and Manufacturing Organization (CDMO), we support the development and manufacture of drug substances, intermediates, and drug products across the full life cycle. We are globally recognized for our leadership in specialized technologies such as Spray Drying and Continuous Tableting. But what truly sets us apart is not just what we do — it is how we do it: with purpose, care, collaboration, and a deep commitment to doing the right things right.

Our people are the reason for our success. We are a global and diverse team of more than 2,600 team members across Europe, the USA, and Asia, bringing together different experiences and perspectives to help our partners to overcome complex challenges. We believe that an inclusive environment — where everyone, regardless of background, identity or ability, is respected, heard and empowered to contribute — is essential to drive innovation, ensure quality, and secure long‑term sustainable success.

And as we grow, so do the opportunities for our people to develop, broaden their perspectives, and build meaningful careers. Because at Hovione, better starts with those who choose to make a difference every day. Will you be one of them?

You will be responsible to

• Architect and manage the Cyber Defense Center's SOAR ecosystem, designing, developing, and continuously improving automated playbooks, workflows, and response actions that streamline the alert-to-resolution lifecycle;
• Lead detection engineering activities by developing, testing, tuning, and deploying detection content across SIEM, EDR, NDR, cloud, and OT security platforms using detection-as-code and CI/CD methodologies;
• Design and maintain automated enrichment capabilities that integrate threat intelligence platforms, asset inventories, identity providers, vulnerability management tools, and enterprise security controls;
• Own the global log ingestion and telemetry architecture, ensuring effective onboarding, normalization, enrichment, and quality management of security data from IT, cloud, OT, laboratory, and manufacturing systems;
• Develop and maintain integrations between security platforms and enterprise systems, including ITSM, CMDB, identity management, vulnerability management, and security controls through API-driven automation;
• Lead the Cyber Threat Intelligence (CTI) enablement program, managing intelligence collection, operationalization, and distribution through platforms such as MISP, OpenCTI, or commercial Threat Intelligence Platforms;
• Build intelligence-driven detection and response capabilities, ensuring threat intelligence indicators and adversary techniques are continuously translated into actionable detections, hunting activities, and response playbooks;
• Conduct advanced threat hunting exercises across endpoint, network, cloud, and OT environments, leveraging MITRE ATT&CK methodologies and intelligence-led hunting techniques;
• Define, monitor, and report engineering performance metrics, including detection coverage, automation effectiveness, alert quality, analyst efficiency gains, MTTD, MTTR, and false-positive reduction;
• Evaluate and integrate emerging cybersecurity technologies, contributing to the evolution of Hovione's Cyber Defense strategy through innovation, technical leadership, and cybersecurity architecture improvements.

We are looking to recruit a Candidate

• Bachelor's Degree in Information Technology, Cybersecurity, Computer Science, Engineering, or a related scientific discipline;
• Minimum of 8 years of cybersecurity experience, including at least 5 years in a senior Cyber Defense Center engineering, SOC engineering, CTI engineering, or cybersecurity platform engineering role;
• Proven experience leading the implementation and integration of Cyber Defense Center capabilities, including SIEM, SOAR, threat intelligence platforms, detection engineering, and security automation initiatives;
• Strong hands-on expertise with CrowdStrike Falcon, CrowdStrike Next-Generation SIEM, CrowdStrike SOAR, and security orchestration technologies at both architectural and operational levels;
• Deep knowledge of MITRE ATT&CK (Enterprise and ICS), threat intelligence operationalization, threat hunting methodologies, and security detection engineering best practices;
• Solid understanding of OT/ICS cybersecurity, industrial protocols, manufacturing technologies, and security monitoring requirements within critical infrastructure or regulated environments;
• Experience with cloud security technologies, security telemetry pipelines, API integrations, scripting, automation, and security engineering within Azure and AWS environments;
• Professional fluency in English, combined with excellent analytical, problem-solving, communication, leadership, and stakeholder management skills.

Hovione is a proud Equal Opportunity Employer

Inclusion and diversity are key to us. We are committed to creating an inclusive recruitment experience and welcome applications from all qualified candidates. If you require any reasonable accommodation or support during the application or interview process, please contact us, and we will be happy to assist.

Notice to Agencies and Search Firms Representatives

Hovione does not accept unsolicited resumes from agencies or search firms for this job posting. Any resumes submitted to Hovione by a third-party agency or search firm without a valid written and signed search agreement will become the sole property of Hovione. No fees will be paid if a candidate is hired for this position as a result of an unsolicited referral.