Senior Information Security Engineer at Globus Medical

Job description

At Globus Medical, we move with a sense of urgency to deliver innovations that improve the quality of life of patients with musculoskeletal disorders. Our team is inspired by the needs of these patients, and the surgeons and healthcare providers who treat them. We embrace a culture of exceptional response by partnering with researchers and educators to transform clinical insights into tangible solutions. Our solutions improve the techniques and outcomes of surgery so patients can resume their lives as quickly as possible. Position Summary : We are seeking a Senior Information Security Engineer specializing in Microsoft security, identity protection, cloud threat detection, data protection, and incident response. This position will design, implement, and operationalize security controls across Microsoft 365, Microsoft Entra, Azure, Intune, Defender, and Purview while integrating Microsoft security telemetry with the organization’s broader security ecosystem, including CrowdStrike and Rapid7. The engineer will lead complex identity and cloud-security investigations, develop and tune detection and response capabilities, strengthen privileged-access and managed-device controls, and help prevent unauthorized access and data exfiltration from Exchange Online, SharePoint, OneDrive, Teams, and other enterprise services. The role will also establish repeatable playbooks, support post-incident remediation, mentor junior analysts, and translate technical findings into actionable operational and executive reporting. Essential Functions : Design, implement, and maintain Microsoft security controls across Entra ID, Microsoft 365, Defender, Intune, and Purview, including Conditional Access, privileged access, phishing-resistant authentication, device compliance, information protection, DLP, and secure access from managed and unmanaged devices. Lead identity and Microsoft 365 security monitoring, investigation, and incident response, including identity compromise, suspicious authentication activity, phishing, token/session abuse, business email compromise, unauthorized cloud access, and potential data exfiltration across Exchange Online, SharePoint, OneDrive, Teams, and connected services. Develop and tune security detections, threat-hunting capabilities, and response workflows using Microsoft Defender XDR, KQL, Microsoft security telemetry, and integrations with platforms such as CrowdStrike and Rapid7. Strengthen enterprise identity security across Microsoft Entra ID, Active Directory, privileged accounts, service/workload identities, authentication methods, access reviews, and Privileged Identity Management. Implement and operationalize Microsoft Purview data-security capabilities, including Information Protection, sensitivity labels, DLP, Audit, eDiscovery, and Insider Risk to support data protection and security investigations. Develop and maintain incident-response playbooks and containment procedures, conduct post-incident reviews, preserve investigative evidence, and track remediation activities through accountable owners and target dates. Partner with IT, Legal, Privacy, Compliance, HR, business stakeholders, and security service providers during security investigations and remediation activities, with clearly defined internal and vendor responsibilities. Apply security changes through structured testing and controlled deployment, including report-only evaluation, pilot groups, exception management, validation, and rollback planning to balance security improvement with business continuity. Adheres to the letter and spirit of the company Code of Conduct, the AdvaMed Code, MedTech Code, and all other company policies. Ensures Compliance with applicable governmental laws, rules, and regulations, both in the United States and internationally, by completing introductory and annual training and maintaining knowledge of compliance as it applies to your role Represents the company in a professional manner and uphold the highest standards of ethical business practices and socially responsible conduct in all interactions with other employees, customers, suppliers, and other third parties Reasonable accommodations may be made to enable individuals with disabilities to perform these essential functions. Qualifications : Education: Bachelor’s Information Security, or related field. Microsoft Certified: Azure Security Engineer Associate, Microsoft security operations, identity, or information-protection experience demonstrated through equivalent certifications or hands-on work. Technical Skills : Advanced proficiency with SIEM, EDR, SOAR, and vulnerability management tools. Strong scripting skills (Python, PowerShell, Bash). Deep understanding of cloud security (AWS, Azure, GCP). Familiarity with DevSecOps and CI/CD security integration. Experience with zero trust architecture and identity management. Competencies Strong identity and access security knowledge, including Zero Trust, MFA and phishing-resistant authentication, privileged access, identity protection, Active Directory, and hybrid identity environments. Experience with security monitoring, threat detection, incident response, and threat hunting, including SIEM/XDR technologies and platforms such as Microsoft Defender, CrowdStrike Falcon, and Rapid7. Experience protecting Microsoft 365 data and cloud services, including Exchange Online, SharePoint, OneDrive, Teams, DLP, information protection, auditing, and investigation of suspicious cloud activity. Proficiency with KQL and PowerShell for security investigations, detection engineering, automation, and operational security tasks; Python or other scripting experience is beneficial. Experience with endpoint and device security, including Microsoft Intune, device compliance, security baselines, and access controls for managed and unmanaged devices. Working knowledge of cloud and hybrid security architectures, with strong Microsoft Azure/Microsoft 365 expertise and familiarity with AWS or other cloud environments. Understanding of vulnerability management, security automation, incident-response processes, and integration between security platforms. Physical Demands : The physical demands listed here are representative of those that must be met by and employee to successfully perform the essential functions of this job. Required to sit; climb or balance; and stoop, kneel, crouch or crawl Required to regularly lift and/or move up to 10 pounds, and occasionally lift and/or move up to 25 pounds Required to possess specific visons abilities, including: close vision, distance vision, color vision, peripheral vision, depth perception and capacity to adjust focus Our Values : Our Life Moves Us philosophy is built on four values: Passionate About Innovation, Customer Focused, Teamwork, and Driven. Passionate about Innovation : Improving patient care by delivering advanced technology to our customers is at the core of what we do. We are passionate in our role in improving the lives of patients by continuously developing better solutions. Customer Focused : We listen to our customers’ needs and respond with a sense of urgency. Teamwork : Working together, anything is possible. We value every person on our team and treat each other with respect. We are accountable to one another and support each other. Together, we make each other stronger. Driven : We pursue our mission with energy and passion. We are nimble, results-oriented and decisive. We overcome obstacles that arise in our quest to deliver solutions that will improve the lives of our customers and patients. Equal Employment Opportunity : Globus Medical is an equal opportunity employer. All applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation, age, disability, marital status, pregnancy, national origin or citizenship. We are committed to a diverse workforce. We value all employees’ talents and support an environment that is inclusive and respectful. Other Duties : Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice.

Requirements

Must-haves

Develop and tune security detections, threat-hunting capabilities, and response workflows using Microsoft Defender XDR, KQL, Microsoft security telemetry, and integrations with platforms such as CrowdStrike and Rapid7.
Strengthen enterprise identity security across Microsoft Entra ID, Active Directory, privileged accounts, service/workload identities, authentication methods, access reviews, and Privileged Identity Management.
Develop and maintain incident-response playbooks and containment procedures, conduct post-incident reviews, preserve investigative evidence, and track remediation activities through accountable owners and target dates.
Partner with IT, Legal, Privacy, Compliance, HR, business stakeholders, and security service providers during security investigations and remediation activities, with clearly defined internal and vendor responsibilities.
Adheres to the letter and spirit of the company Code of Conduct, the AdvaMed Code, MedTech Code, and all other company policies.
Reasonable accommodations may be made to enable individuals with disabilities to perform these essential functions.
Education: Bachelor’s Information Security, or related field.
Microsoft Certified: Azure Security Engineer Associate, Microsoft security operations, identity, or information-protection experience demonstrated through equivalent certifications or hands-on work.
Technical Skills : Advanced proficiency with SIEM, EDR, SOAR, and vulnerability management tools.
Strong scripting skills (Python, PowerShell, Bash).
Deep understanding of cloud security (AWS, Azure, GCP).
Familiarity with DevSecOps and CI/CD security integration.
Experience with zero trust architecture and identity management.
Competencies Strong identity and access security knowledge, including Zero Trust, MFA and phishing-resistant authentication, privileged access, identity protection, Active Directory, and hybrid identity environments.
Experience with security monitoring, threat detection, incident response, and threat hunting, including SIEM/XDR technologies and platforms such as Microsoft Defender, CrowdStrike Falcon, and Rapid7.
Experience protecting Microsoft 365 data and cloud services, including Exchange Online, SharePoint, OneDrive, Teams, DLP, information protection, auditing, and investigation of suspicious cloud activity.
Proficiency with KQL and PowerShell for security investigations, detection engineering, automation, and operational security tasks; Python or other scripting experience is beneficial.
Experience with endpoint and device security, including Microsoft Intune, device compliance, security baselines, and access controls for managed and unmanaged devices.
Working knowledge of cloud and hybrid security architectures, with strong Microsoft Azure/Microsoft 365 expertise and familiarity with AWS or other cloud environments.
Understanding of vulnerability management, security automation, incident-response processes, and integration between security platforms.
The physical demands listed here are representative of those that must be met by and employee to successfully perform the essential functions of this job.
Required to sit; climb or balance; and stoop, kneel, crouch or crawl
Required to regularly lift and/or move up to 10 pounds, and occasionally lift and/or move up to 25 pounds
Required to possess specific visons abilities, including: close vision, distance vision, color vision, peripheral vision, depth perception and capacity to adjust focus

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

azurepythonawsgcpci/cd

Platform: workday
Effort: long

Benefits

Benefits detected in the listing.

Vision