{"id":138871,"url":"https://alion.io/job/amgen-encryption-agility-analyst","title":"Encryption Agility Analyst","company":{"id":4775,"name":"Amgen","domain":"amgen.com","url":"https://alion.io/company/amgen","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":79,"open_postings":437,"ghost_share":0.002,"stale_share":0.831,"repost_share":0.007,"time_to_fill_p50_days":27,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Analytics","role_family":"Analytics","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Hyderabad, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":14000,"max_usd":33000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":1562},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"CI/CD","optional":false},{"name":"HIPAA","optional":false},{"name":"Human-in-the-Loop","optional":false},{"name":"PKI","optional":false},{"name":"Rest API","optional":false},{"name":"SBOM","optional":false},{"name":"ServiceNow","optional":false},{"name":"Agile","optional":true},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"Bash","optional":true},{"name":"Configuration Management","optional":true},{"name":"Crowdstrike","optional":true},{"name":"GitGuardian","optional":true},{"name":"GitLab","optional":true},{"name":"HashiCorp Vault","optional":true},{"name":"ITIL","optional":true},{"name":"JavaScript","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true},{"name":"Qualys Cloud Platform","optional":true},{"name":"SIEM","optional":true},{"name":"Veracode","optional":true},{"name":"Wiz","optional":true}],"status":"live","first_seen_at":"2026-08-25T00:00:00Z","employer_posted_date":"2026-08-25","last_verified_at":"2026-10-17T08:58:40Z","board_verified":true,"closed_at":null,"days_open":53,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":53},"description":"Career Category\nInformation SystemsJob Description\nRole Name: Senior Associate Information Security - Encryption Agility Analyst\nJob Posting Title: Senior Associate Information Security - Encryption Agility Analyst\nDepartment Name: Trusted Core Technologies\nABOUT AMGEN\nAmgen harnesses the best of biology and technology to fight the world's toughest diseases, and make people's lives easier, fuller and longer. We discover, develop, manufacture and deliver innovative medicines to help millions of patients. Amgen helped establish the biotechnology industry more than 40 years ago and remains on the cutting-edge of innovation, using technology and human genetic data to push beyond what's known today.\nABOUT THE ROLE\nRole Description:\nThe Senior Associate Information Security - Encryption Agility Analyst will support Amgen's enterprise Encryption Agility Service for Post-Quantum Cryptography (PQC) Readiness Preparation. This role supports the Senior Manager Information Security - Encryption Agility Service Lead, the Senior Specialist Information Security - Encryption Agility Team Architect, and Global Career Framework level 5 (L5) engineers by helping collect, validate, document, and report cryptographic inventory and remediation data across Amgen. The role contributes to the Cryptographic Bill of Materials (CBOM), discovery workflows, data quality controls, ticket tracking, dashboards, and operational documentation that enable Amgen to manage encryption, cryptography, crypto agility, and post-quantum readiness across applications, cloud, infrastructure, identity, Public Key Infrastructure (PKI), certificates, Key Management Services (KMS), secrets, data protection, Software as a Service (SaaS), and third-party ecosystems.\nThis position is hands-on and detail-oriented. The analyst will review tool outputs, support evidence collection, maintain inventory records, assist with false-positive triage, prepare reporting views, document remediation status, and coordinate with service owners. The role will work with Digital Identity Access Service (DIAS), PKI and certificate service owners, Application Security, Artificial Intelligence (AI) Security, Enterprise Architecture, cloud, infrastructure, platform, Risk and Compliance, Procurement, Legal, Third Party Risk Management (TPRM), Operational Technology (OT), and vendor teams while escalating complex cryptographic design or exception decisions to the L5 engineer, Principal Architect, or Senior Manager.\nThe role should also support the adoption of Artificial Intelligence (AI)-enabled process orchestration within the Encryption Agility Service by helping document manual workflows, identify repetitive analysis or reporting tasks, test AI-assisted outputs, and support human-in-the-loop review activities. The analyst may assist Global Career Framework level 5 (L5) engineers and the Principal Architect with AI agent-enabled workflows that improve Cryptographic Bill of Materials (CBOM) data quality, remediation tracking, dashboard preparation, evidence review, and service documentation.\nRoles & Responsibilities:\nSupport Encryption Agility Service operations, including intake processing, work tracking, dashboard updates, meeting notes, service documentation, Standard Operating Procedures (SOPs) maintenance, reporting inputs, and service improvement actions.\nCollect and validate cryptographic inventory data from source code, binaries, cloud key services, endpoints, file systems, network traffic, PKI and certificates, KMS and secrets, vendor attestations, Software Bill of Materials (SBOM) inputs, and Subject Matter Expert (SME) interviews.\nMaintain CBOM records using CycloneDX 1.6+ as the target format, including required fields, source systems, asset ownership, quantum-vulnerability status, remediation status, data quality checks, reporting views, and ServiceNow asset correlation.\nReview cryptographic scan outputs, certificate records, certificate chains, cipher suite configurations, Transport Layer Security (TLS) settings, Secure Shell (SSH) settings, Open Authorization (OAuth), Security Assertion Markup Language (SAML), JSON Web Token (JWT) patterns, cloud key records, and key or secret storage evidence under L5 engineer or Principal Architect guidance.\nSupport data ingestion, tool integration, and evidence management across Amgen Enterprise systems and cryptographic discovery platforms.\nAssist Digital Identity Access Service (DIAS), Public Key Infrastructure (PKI) service owners, certificate management teams, and identity teams with certificate visibility, certificate ownership, expiration tracking, Certificate Lifecycle Manager (CLM) data needs, manual-to-automated deployment candidates, Certificate Authority (CA) roadmap inputs, and operational change window planning.\nAssist cloud, infrastructure, and platform teams with KMS and secrets inventory, Hardware Security Module (HSM) evidence, key ownership records, key rotation status, key retirement tracking, storage standards, and reporting needed for centralized or federated key management controls.\nSupport Application Security, Artificial Intelligence (AI) Security, Enterprise Architecture, Development and Operations (DevOps), and engineering teams with approved cryptographic library adoption, Continuous Integration/Continuous Delivery (CI/CD) scan data, Secure Software Development Life Cycle (SSDLC) requirements, scanning rules, secure code examples, and developer remediation playbooks.\nTrack remediation and risk prioritization data for business-critical applications, high-volume sensitive data flows, third-party dependencies, identity services, legacy platforms, Key Computerized Systems (KCS), validated Good x Practice (GxP) systems, and OT scope.\nSupport vendor and third-party governance activities with Procurement, Legal, Risk and Compliance, Third Party Risk Management (TPRM), and business owners by collecting technical questionnaire responses, CBOM requests, cryptographic evidence, roadmap updates, and supplier follow-up actions.\nMaintain knowledge articles, implementation guides, training material, exception records, and escalation summaries while monitoring relevant updates from National Institute of Standards and Technology (NIST), Internet Engineering Task Force (IETF), National Security Agency Commercial National Security Algorithm Suite 2.0 (NSA CNSA 2.0), International Organization for Standardization (ISO), Health Insurance Portability and Accountability Act (HIPAA), Health Information Trust Alliance (HITRUST), and broader industry cryptography guidance.\nSupport Artificial Intelligence (AI)-enabled process orchestration activities by documenting manual Encryption Agility Service workflows, identifying repetitive evidence, inventory, reporting, and remediation tracking tasks, testing AI-assisted outputs, and maintaining human-in-the-loop review records for findings, exceptions, and decision-support material under Global Career Framework level 5 (L5) engineer or Principal Architect guidance.\nBasic Qualifications and Experience:\nMaster's degree with 1 to 3 years of experience in Information Security, Cybersecurity, Cryptography, Security Architecture, Computer Science, Information Technology, Engineering, or related field OR\nBachelor's degree with 3 to 5 years of experience in Information Security, Cybersecurity, Cryptography, Security Architecture, Computer Science, Information Technology, Engineering, or related field OR\nDiploma with 7 to 9 years of experience in Information Security, Cybersecurity, Cryptography, Security Architecture, Computer Science, Information Technology, Engineering, or related field\nFunctional Skills:\nMust-Have Skills:\nWorking knowledge of information security and foundational enterprise cryptography, including PKI, X.509 certificates, TLS, cipher suites, KMS, secrets management, key lifecycle, encryption at rest, encryption in transit, cloud key services, and identity protocols.\nExperience reviewing security tool outputs, maintaining inventory records, validating data quality, documenting findings, updating tickets, and supporting dashboards or operational reports.\nBasic understanding of post-quantum cryptography, crypto agility, cryptographic discovery, CBOM/SBOM concepts, risk-based remediation, and Steal-Now-Decrypt-Later (SNDL) risk.\nAbility to follow technical guidance, document evidence clearly, coordinate with service owners, and escalate complex cryptographic findings or exceptions appropriately.\nGood-to-Have Skills:\nExperience with ServiceNow Configuration Management Database (CMDB)/Governance, Risk, and Compliance (GRC), Guard, Wiz, Qualys, Fortinet, Netskope, CrowdStrike, GitLab, Veracode, GitGuardian, Amazon Web Services (AWS) KMS, AWS Certificate Manager, AWS Secrets Manager, Microsoft PKI, Sectigo, HashiCorp Vault, HSMs, Certificate Lifecycle Management (CLM) platforms, or Security Information and Event Management (SIEM)/data lake tools.\nExperience supporting CBOM/SBOM data management using CycloneDX 1.6+, Application Programming Interfaces (APIs), Comma-Separated Values (CSV), JavaScript Object Notation (JSON), spreadsheets, dashboards, data quality checks, and audit-ready reporting.\nExperience supporting certificate lifecycle activities, certificate expiration tracking, certificate ownership updates, certificate rotation evidence, or PKI operational reporting.\nExperience supporting cloud security, application security, DevOps, SSDLC governance, CI/CD quality gates, static analysis, dynamic analysis, composition analysis, or developer remediation tracking.\nExperience in pharmaceutical, life sciences, regulated, validated, GxP, KCS, manufacturing, OT, or other change-controlled environments.\nExperience supporting vendor or third-party risk activities, supplier questionnaires, roadmap tracking, evidence collection, or Software as a Service platform dependency analysis.\nFoundational scripting or data handling experience with Python, PowerShell, Bash, Representational State Transfer Application Programming Interfaces (REST APIs), CSV files, JSON files, or lightweight reporting automation.\nDesired experience using Artificial Intelligence (AI)-enabled tools, workflow automation, or AI agents to support security, governance, risk, compliance, reporting, data quality, or technology operations processes, including the ability to help test outputs, document human review points, and identify opportunities to reduce repetitive manual work.\nDesired familiarity with AI agent concepts, including agent roles, workflow orchestration, tool integration, human-in-the-loop review, output validation, audit trails, and escalation to engineers, architects, or service owners when AI-assisted outputs require technical or risk-based judgment.\nProfessional Certifications:\nSecurity+, Systems Security Certified Practitioner (SSCP), or equivalent foundational security certification (preferred)\nCertified Information Systems Security Professional (CISSP) Associate, CISSP, Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), or Certified in Risk and Information Systems Control (CRISC) (preferred)\nCertified Cloud Security Professional (CCSP), AWS Certified Security - Specialty, Microsoft Azure Security Engineer, or equivalent cloud security certification (preferred)\nInformation Technology Infrastructure Library (ITIL), Scaled Agile Framework (SAFe), product management, or equivalent delivery certification (preferred)\nRelevant PKI, KMS, HSM, cryptographic discovery, certificate lifecycle management, cloud key management, or post-quantum cryptography training/certification (preferred)\nSoft Skills:\nExcellent analytical, troubleshooting, and problem-solving skills.\nStrong attention to detail and commitment to accurate inventory, evidence, and reporting data.\nStrong verbal and written communication skills for technical and non-technical stakeholders.\nAbility to translate findings into clear documentation, tickets, summaries, and escalat...","description_format":"text","description_chars":13386,"description_truncated":true,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Health insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Prescription Drugs","Digital Signature","Immunology & Inflammation Therapeutics","Cardiometabolic Therapeutics"],"lifecycle":[{"event":"open","at":"2026-08-25T00:00:00Z"}],"visa":[],"liveness":{"score":14,"band":"cold","label":"Long shot","p_open":1,"p_active":0.376,"p_room":0.36,"age_days":53,"expected_fill_days":27,"reasons":["conf:0","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/amgen-encryption-agility-analyst","json_url":"https://alion.io/job/amgen-encryption-agility-analyst.json","meta":{"generated_at":"2026-10-17T11:14:22Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14642,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4775},"rest":"https://alion.io/mcp/rest/get_company?id=4775"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Famgen-encryption-agility-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Famgen-encryption-agility-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Famgen-encryption-agility-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/amgen-encryption-agility-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Famgen-encryption-agility-analyst"}]}