1,973,072open jobs
116,587companies
257,182added this week
Browse all
Salary
$65k – $120k per year
Location
Hybrid (Barcelona, Spain)
Seniority
Architect · 8+ years exp
Employment
Full-Time

Confirmed on the employer's own hiring board on Oct 25, 2026. First seen by Alion on Oct 23, 2026. Novartis scores B on the Alion truth index.

Overview
Company
Impact
Profile match
Novartis is a Swiss pharmaceutical company created in 1996 by the merger of Ciba-Geigy and Sandoz, two Basel chemical and drug houses with roots in the nineteenth century. It has spent the past decade narrowing itself into a pure innovative medicines business, spinning off its generics arm as Sandoz in 2023 and its eye care business as Alcon in 2019, and now concentrates on cardiovascular, immunology, neuroscience and oncology, including radioligand therapies and gene therapy. Headquartered in Basel and listed in Zurich and New York, it is among the largest research spenders in the industry.

Salary Range:

€57,900.00 - €107,500.00

Job Description Summary

The Detection and Response Associate Director will play a strategic role within the Novartis Cyber Security Operations Center (CSOC), a globally integrated security organization dedicated to protecting Novartis against sophisticated and evolving cyber threats.

This position combines deep technical expertise, strategic influence, and AI-driven innovation to advance global threat detection, investigation, and incident response capabilities. The role will drive operational excellence, champion emerging technologies and intelligent automation, and contribute to the continuous evolution of cyber defense at Novartis.

Working closely with global cybersecurity leadership, engineering teams, and key business stakeholders, the Associate Director will lead strategic initiatives, strengthen cyber resilience, and drive meaningful improvements across security operations. The position is designed for an experienced cybersecurity professional passionate about solving complex challenges, advancing innovation, and delivering measurable security impact.

Job Description

#LI-Hybrid

Location: Barcelona, Spain

Key Responsibilities:

  • Shape and influence global TDR strategy, driving operational excellence, innovation, and advanced cyber defense capabilities. Serve as a senior technical authority, providing strategic guidance on complex security challenges and critical incident response activities.
  • Drive AI adoption, intelligent automation, and emerging technologies to transform detection and response capabilities.
  • Lead strategic initiatives in collaboration with global cybersecurity leadership, engineering teams, and key stakeholders.
  • Oversee and enhance security monitoring, threat detection, and triage capabilities across the Novartis IT ecosystem. Leverage SIEM, advanced analytics, and threat intelligence to identify sophisticated threats and improve detection coverage.
  • Drive improvements in detection engineering, security controls, and capabilities against evolving TTPs.
  • Serve as a senior escalation point for complex security incidents involving sophisticated threat actors.
  • Lead critical investigations and response activities, including forensic analysis, containment, stakeholder communication, and remediation.
  • Translate incident findings into actionable recommendations to strengthen organizational cyber resilience.
  • Drive continuous improvement of TDR processes, investigation methodologies, and response playbooks. Collaborate with engineering teams to advance security orchestration, automation, and technology integration.
  • Provide technical mentorship, promote investigation quality, and influence best practices across global TDR teams.

Essential Requirement:

  • 8+ years of cybersecurity experience, including 5+ years in Security Operations, Threat Detection, Incident Response, and Threat Hunting.
  • Proven experience leading complex security investigations and driving cross-functional initiatives in large enterprise environments.
  • Strong track record of enhancing detection capabilities, incident response processes, operational efficiency, and investigation quality.
  • Experience mentoring security analysts and influencing stakeholders across teams without direct people management responsibility.
  • Hands-on expertise with SIEM, EDR/XDR, Detection Engineering, Security Telemetry, and Incident Response tools such as Microsoft Sentinel, Microsoft Defender, and Splunk.
  • Solid knowledge of cloud security investigations across Azure and/or AWS, including identity, endpoint, and cloud telemetry analysis.
  • Skilled in leveraging MITRE ATT&CK, threat intelligence, and attacker behavior analysis to improve detection and response strategies.
  • Proficiency in security automation, SOAR, KQL/SPL/Python scripting, AI-enabled SOC use cases, with a Bachelor's degree (or equivalent experience).

Desirable Requirement:

  • Certifications such as CISSP, GCIH, GCFA, or cloud security certifications preferred.

Benefits & Rewards

At Novartis, we’re committed to reimagining medicine together - and rewarding the people who make it happen.

Expected Annual Base Salary Range for role: 57,900.00 - 107,500.00 EUR

The base salary offered is determined based on gender-neutral objectives, such as relevant skills, competencies and experience in accordance with the Novartis pay setting policy and upon joining Novartis will be reviewed periodically.

In addition to your base salary, you may be eligible for a performance-based bonus depending on certain performance parameters.

The rewards of being part of our team go far beyond base pay and incentives. We also offer a variety of competitive benefits in kind to help you thrive personally and professionally, such as insurance plans, retirement plans, wellbeing resources and global recognition programs. In addition, we provide flexible and hybrid working options, where possible, and minimum 14 weeks paid parental leave.

Pay equity is a fundamental principle of our employment policy and reflects our commitment to create a diverse, equitable and inclusive environment that treats all employees with dignity and respect, as outlined in our Code of Ethics.

Read our brochure to learn more about our global total rewards offering:

https://www.novartis.com/sites/novartis_com/files/novartis-life-handbook.pdf

Note: Benefits and compensation may vary by country and are subject to local legal requirements, including provisions of collective bargaining agreements where applicable. A full overview of your compensation package, including any relevant collective bargaining agreement details applicable to your role based on your employment location and Novartis employer entity, will be communicated separately to you during the application process.

Commitment to Diversity and Inclusion / EEO

Novartis is committed to building an outstanding, inclusive work environment and diverse teams’ representative of the patients and communities we serve.

You’ll receive: You can find everything you need to know about our benefits and rewards in the Novartis Life Handbook. https://www.novartis.com/careers/benefits-rewards Commitment to Diversity and Inclusion: Novartis is committed to building an outstanding, inclusive work environment and diverse teams' representative of the patients and communities we serve.

Skills Desired

Communication, Cybersecurity Compliance, Cyber Threat Hunting, Cyber Threat Intelligence, Cyber Threat Prevention, Decision Making, Digital Capabilities, Influencing Skills, Information Security Risk Management, Technology Use, Vulnerability Management
Free account
Stop reading job ads. Get the ones that fit.
One free account turns this page into a shortlist built around your stack, your level and your pay.
Match on every job. Stack, seniority, pay and location, scored against your profile.
1,973,072 open roles. Read straight off company career pages, refreshed every day.
Unlimited applications. Every one you send is tracked in one place, on-site or on a company board.
3 tailored CVs a month. Rewritten for the exact job you are applying to. Included free.
Create a free account Continue with Google
Free forever. No card. Under a minute.

Your match

How well do you fit this role?
Two answers are enough for a real match. No account needed.
Check my fit
Answers stay in this browser until you create an account.

Recommended for you based on this role

Security
Similar stack
Same company
Barcelona
$77k – $144k per year • Hybrid • Full-Time • Barcelona
AI/ML
AI Agents
DevOps
IAM
Cybersecurity
Zero Trust
Least Privilege
Apply
≈ $105k – $239k per year (Estimated) • Hybrid • Full-Time • Chicago
Apply
≈ $72k – $133k per year (Estimated) • Hybrid • Full-Time • Toronto
Cybersecurity
Microsoft Defender
Tanium
DLP
Apply
≈ $24k – $34k per year (Estimated) • Hybrid • Full-Time • Espoo
AI/ML
Machine Learning
DevOps
Azure
AWS
TCP/IP
DNS
Cybersecurity
SIEM
Apply
≈ $119k – $231k per year (Estimated) • Equity • Remote (United States) • Full-Time • United States
DevOps
Linux
Windows
Cybersecurity
Crowdstrike
Apply
HR Intern 2 days ago
$11k per year • In office • Internship • Barcelona
Apply
≈ $35k – $62k per year (Estimated) • Hybrid • Full-Time • Barcelona
DevOps
Dynatrace
Apply
≈ $81k – $197k per year (Estimated) • In office • Barcelona
AI/ML
JAX
TensorFlow
PyTorch
Interpretability
Machine Learning
Apply
≈ $56k – $107k per year (Estimated) • In office • Full-Time • Bachelor's Degree • Barcelona
Apply
≈ $30k – $76k per year (Estimated) • Remote (Spain) • Full-Time • PhD • Barcelona
Apply
See all jobs
This is one of many
1,973,072 more open roles from verified company boards, updated every day.