12 Nov
|
AMGEN
|
Hyderabad
India - Hyderabad
JOB ID: R-248010 LOCATION: India - Hyderabad WORK LOCATION TYPE: On Site DATE POSTED: Jul. 21, 2026 CATEGORY: Information Systems
Role Name: Senior Associate Information Security - Encryption Agility Analyst
Job Posting Title :Senior Associate Information Security - Encryption Agility Analyst
Workday Job Title :Senior Associate Information Security
Department Name :Trusted Core Technologies
Role Global Career Framework (GCF) :4A
ABOUT AMGEN
Amgen harnesses the best of biology and technology to fight the world's toughest diseases, and make people's lives easier, fuller and longer. We discover, develop, manufacture and deliver cutting-edge medicines to help millions of patients. Amgen helped establish the biotechnology industry more than 40 years ago and remains on the cutting-edge of innovation, using technology and human genetic data to push beyond what's known today.
ABOUT THE ROLE
Role Description : This position is hands-on and detail-oriented. The analyst will review tool outputs, support evidence collection, maintain inventory records, assist with false-positive triage, prepare reporting views, document remediation status, and coordinate with service owners. The role will work with Digital Identity Access Service (DIAS), PKI and certificate service owners, Application Security, Artificial Intelligence (AI) Security, Enterprise Architecture, cloud, infrastructure, platform, Risk and Compliance, Procurement, Legal, Third Party Risk Management (TPRM), Operational Technology (OT), and vendor teams while escalating complex cryptographic design or exception decisions to the L5 engineer, Principal Architect, or Senior Manager.
Roles & Responsibilities :
- Support Encryption Agility Service operations, including intake processing, work tracking, dashboard updates, meeting notes,
service documentation, Standard Operating Procedures (SOPs) maintenance, reporting inputs, and service improvement actions.
- Collect and validate cryptographic inventory data from source code, binaries, cloud key services, endpoints, file systems, network traffic, PKI and certificates, KMS and secrets, vendor attestations, Software Bill of Materials (SBOM) inputs, and Subject Matter Expert (SME) interviews.
- Maintain CBOM records using CycloneDX 1.6+ as the target format, including required fields, source systems, asset ownership, quantum-vulnerability status, remediation status, data quality checks, reporting views, and ServiceNow asset correlation.
- Review cryptographic scan outputs, certificate records, certificate chains, cipher suite configurations, Transport Layer Security (TLS) settings, Secure Shell (SSH) settings, Open Authorization (OAuth), Security Assertion Markup Language (SAML), JSON Web Token (JWT) patterns, cloud key records, and key or secret storage evidence under L5 engineer or Principal Architect guidance.
- Support data ingestion, tool integration, and evidence management across Amgen Enterprise systems and cryptographic discovery platforms.
- Assist cloud, infrastructure, and platform teams with KMS and secrets inventory, Hardware Security Module (HSM) evidence, key ownership records, key rotation status, key retirement tracking, storage standards,
and reporting needed for centralized or federated key management controls.
- Support Application Security, AI Security, Enterprise Architecture, Development and Operations (DevOps), and engineering teams with approved cryptographic library adoption, Continuous Integration/Continuous Delivery (CI/CD) scan data, Secure Software Development Life Cycle (SSDLC) requirements, scanning rules, secure code examples, and developer remediation playbooks.
- Support vendor and third-party governance activities with Procurement, Legal, Risk and Compliance, TPRM, and business owners by collecting technical questionnaire responses, CBOM requests, cryptographic evidence, roadmap updates, and supplier follow-up actions.
- Maintain knowledge articles, implementation guides, training material, exception records, and escalation summaries while monitoring relevant updates from National Institute of Standards and Technology (NIST), Internet Engineering Task Force (IETF), National Security Agency Commercial National Security Algorithm Suite 2.0 (NSA CNSA 2.0), International Organization for Standardization (ISO), Health Insurance Portability and Accountability Act (HIPAA), Health Information Trust Alliance (HITRUST), and broader industry cryptography guidance.
Basic Qualifications and Experience :
- Master's degree with 1 to 3 years of experience in Information Security, Cybersecurity, Cryptography, Security Architecture, Computer Science, Information Technology, Engineering, or related field OR
- Bachelor's degree with 3 to 5 years of experience in Information Security, Cybersecurity, Cryptography, Security Architecture, Computer Science, Information Technology, Engineering, or related field OR
- Diploma with 7 to 9 years of ex
📌 Encryption Agility Analyst (Hyderabad)
🏢 AMGEN
📍 Hyderabad