Role Description :

The Senior Associate Information Security - Encryption Agility Analyst will support Amgen's enterprise Encryption Agility Service for Post-Quantum Cryptography (PQC) Readiness Preparation. This role supports the Senior Manager Information Security - Encryption Agility Service Lead, the Senior Specialist Information Security - Encryption Agility Team Architect, and Global Career Framework level 5 (L5) engineers by helping collect, validate, document, and report cryptographic inventory and remediation data across Amgen.

Roles & Responsibilities :

- Support Encryption Agility Service operations, including intake processing, work tracking, dashboard updates, meeting notes, service documentation, Standard Operating Procedures (SOPs) maintenance, reporting inputs, and service improvement actions.
- Collect and validate cryptographic inventory data from source code, binaries, cloud key services, endpoints, file systems, network traffic, PKI and certificates, KMS and secrets, vendor attestations, Software Bill of Materials (SBOM) inputs, and Subject Matter Expert (SME) interviews.
- Maintain CBOM records using CycloneDX 1.6 as the target format, including required fields, source systems, asset ownership, quantum-vulnerability status, remediation status, data quality checks, reporting views, and ServiceNow asset correlation.
- Review cryptographic scan outputs, certificate records, certificate chains, cipher suite configurations, Transport Layer Security (TLS) settings, Secure Shell (SSH) settings, Open Authorization (OAuth), Security Assertion Markup Language (SAML), JSON Web Token (JWT) patterns, cloud key records, and key or secret storage evidence under L5 engineer or Principal Architect guidance.
- Support data ingestion, tool integration, and evidence management across Amgen Enterprise systems and cryptographic discovery platforms.
- Assist DIAS, PKI service owners, certificate management teams, and identity teams with certificate visibility, certificate ownership, expiration tracking,



Certificate Lifecycle Manager (CLM) data needs, manual-to-automated deployment candidates, Certificate Authority (CA) roadmap inputs, and operational change window planning.
- Assist cloud, infrastructure, and platform teams with KMS and secrets inventory, Hardware Security Module (HSM) evidence, key ownership records, key rotation status, key retirement tracking, storage standards, and reporting needed for centralized or federated key management controls.
- Support Application Security, AI Security, Enterprise Architecture, Development and Operations (DevOps), and engineering teams with approved cryptographic library adoption, Continuous Integration/Continuous Delivery (CI/CD) scan data, Secure Software Development Life Cycle (SSDLC) requirements, scanning rules, secure code examples, and developer remediation playbooks.
- Track remediation and risk prioritization data for business-critical applications, high-volume sensitive data flows, third-party dependencies, identity services, legacy platforms, Key Computerized Systems (KCS), validated Positive x Practice (GxP) systems, and OT scope.
- Support vendor and third-party governance activities with Procurement, Legal, Risk and Compliance, TPRM, and business owners by collecting technical questionnaire responses, CBOM requests, cryptographic evidence, roadmap updates, and supplier follow-up actions.
- Maintain knowledge articles, implementation guides, training material, exception records, and escalation summaries while monitoring relevant updates from National Institute of Standards and Technology (NIST), Internet Engineering Task Force (IETF),



National Security Agency Commercial National Security Algorithm Suite 2.0 (NSA CNSA 2.0), International Organization for Standardization (ISO), Health Insurance Portability and Accountability Act (HIPAA), Health Information Trust Alliance (HITRUST), and broader industry cryptography guidance.

Basic Qualifications :

- Master's degree with 1 to 3 years of experience in Information Security, Cybersecurity, Cryptography, Security Architecture, Computer Science, Information Technology, Engineering, or related field.
- Bachelor's degree with 3 to 5 years of experience in Information Security, Cybersecurity, Cryptography, Security Architecture, Computer Science, Information Technology, Engineering, or related field.
- Diploma with 7 to 9 years of experience in Information Security, Cybersecurity, Cryptography, Security Architecture, Computer Science, Information Technology, Engineering, or related field.

Must-Have Skills :

- Working knowledge of information security and foundational enterprise cryptography, including PKI, X.509 certificates, TLS, cipher suites, KMS, secrets management, key lifecycle, encryption at rest, encryption in transit, cloud key services, and identity protocols.
- Experience reviewing security tool outputs, maintaining inventory records, validating data quality, documenting findings, updating tickets, and supporting dashboards or operational reports.
- Basic understanding of post-quantum cryptography, crypto agility, cryptographic discovery, CBOM/SBOM concepts, risk-based remediation, and Steal-Now-Decrypt-Later (SNDL) risk.
- Ability to follow technical guidance, document evidence clearly, coordinate with service owners, and escalate complex cryptographic findings or exceptions appropriately.

Note : For your candidature to be considered on this job, you need to apply necessarily on the company's redirected page of this job. Please make sure you apply on the redirected page as well.

📌 Amgen - Senior Associate - Information Security (India)
🏢 AMGEN
📍 India