{"id":3394425,"url":"https://alion.io/job/philips-senior-security-operations-lead-digital-networks","title":"Senior Security Operations Lead — Digital Networks","company":{"id":13838,"name":"Philips","domain":"philips.com","url":"https://alion.io/company/philips-2","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":82,"open_postings":66,"ghost_share":0,"stale_share":0.924,"repost_share":0.015,"time_to_fill_p50_days":12,"computed_at":"2026-10-30T05:48:23Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":32000,"max_usd":71000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":14},"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AIOps","optional":false},{"name":"Cloudflare","optional":false},{"name":"Zscaler","optional":false},{"name":"Active Directory","optional":true},{"name":"Ansible","optional":true},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"DNS","optional":true},{"name":"GCP","optional":true},{"name":"ISO 27001","optional":true},{"name":"ITIL","optional":true},{"name":"ITSM","optional":true},{"name":"PKI","optional":true},{"name":"Python","optional":true},{"name":"Rest API","optional":true},{"name":"ServiceNow","optional":true},{"name":"Splunk","optional":true},{"name":"Terraform","optional":true},{"name":"VPN","optional":true}],"status":"live","first_seen_at":"2026-10-28T11:49:03Z","employer_posted_date":"2026-10-28","last_verified_at":"2026-10-30T04:32:54Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Job Title\nSenior Security Operations Lead - Digital NetworksJob Description\nSenior Security Operations / SME / Governance - Digital Networks\nRole type: Senior individual contributor / hands-on subject-matter expert (with mentoring)\nExperience: ~10-15 years in enterprise network security, with deep and current hands-on depth on Cisco Secure Firewall and at least one major proxy/SSE platform. Hands-on is non-negotiable, this is not a review-only role.\nAbout the role\nDeep technical authority for our firewall, proxy, and generic secure-access estate. You are the person who is hands-on in the consoles, scripts, and vendor APIs every week; the final escalation point when something hard breaks; and the one who keeps the estate audit-ready between incidents. You work in a patient-safety-first engineering culture: direct, plain-spoken, evidence over slideware. Profile mix: 55% Security Operations | 25% Hands-on Technical (incl. automation & AIOps) | 20% Governance, Risk & Compliance.\nWhat you'll own:\n Firewall estate - Cisco Secure Firewall (FTD / FMC / ASA / Firepower): rule lifecycle and hygiene, HA, FMC upgrades and migrations, perimeter, and internal segmentation.\n Proxy & web security - PAC file management at global scale (including China and other high-latency / restricted regions), proxy policy, SSL/TLS inspection.\n Secure Service Edge / SASE - Zscaler (ZIA / ZPA) and Cisco Umbrella as the primary platforms. Exposure to Palo-Alto, Netskope or Cloudflare One is a plus.\n Remote & site connectivity - IPSec / SSL VPN, AnyConnect / Secure Client, site-to-site (S2S), out-of-band management (OOBM), and partner access (S2S / VDI).\nIdentity & access - Cisco ISE / AAA.\nCertificates & PKI - certificate lifecycle and expiry management, TLS, and closed-loop certificate automation.\nVulnerability & advisory response - PSIRT cadence, patching, and upgrade lifecycle across the estate.\nHands-on Technical:\nDeep, current hands-on across the estate: Cisco FTD/FMC/ASA/Firepower, ISE, Cisco SSE/Umbrella, Zscaler ZIA/ZPA, PAC files, PKI/TLS, rule design, SSL inspection, FMC HA and migrations, ISE policy, VPN (IPSec/SSL/S2S) troubleshooting.\nHolds L3/L4 escalation authority with Cisco TAC, Zscaler and managed-service partners, ie: the break-glass engineer when P1/MI hits: firewall HA failures, FMC migrations, PSIRT response.\nWrites and maintains automation in Python, Ansible and Terraform, working directly against vendor REST APIs: Cisco FMC, Zscaler, ISE, and IPAM/DNS (e.g. Efficient IP): safe bulk rule changes, PAC at scale.\nMaintains lab/sandbox to test changes and upgrades before production.\nCloud network security - Liaises with Cloud Infrastructure, Security, DNS, IPAM and Active Directory teams to secure and enable network connectivity and integration across AWS, Azure, GCP and China cloud - Security groups, NACLs, NVA / cloud firewalls, Cloud On-Ramp, ExpressRoute/DX, TGW/VNet peering, SSE PoP integration and CSPM signal handoff.\nOperations & governance:\nDrives the firewall/proxy/SSE domain from reactive firefighting to a predictable run model: ITSM discipline, RCA, change governance, and SLA/KPI ownership for the domain.\nSenior ServiceNow change approver for firewall, proxy, VPN and other security-touching changes; technical reviewer on the change/technical review board.\nKeeps the estate audit-ready - NIS2, ISO 27001, healthcare-grade - with defensible evidence and change-to-change-record traceability.\nMaintains the domain security risk register and supports DR / security tabletop drills.\nHolds managed-service and OEM partners (Cisco, Zscaler and the relevant MSPs) technically accountable on delivery quality, feeding the commercial and escalation process owned by the Lead.\n Stakeholder, Communication & Escalation Management - Runs structured stakeholder engagement, leadership/vendor/audit communications, and escalation as a discipline (thresholds, pathways, ownership) feeding the Lead's commercial authority.\n Service (Operations, Delivery, Commercial & Contractual) Management - Owns partner (MSPs, OEMs) service delivery (quality, milestones, acceptance, security), RFPs (evaluation, scoring, selection inputs), and commercial/contractual oversight (business case, sizing, ROI, lifecycle, services, support, licenses, purchases, Invoices, renewals, exit clauses) feeding the Lead's final decisioning.\nNote: contract management, RFP ownership, business-case approval, and formal vendor-commercial escalation sit with the Lead, Digital Networks, this role provides the technical substance behind them.\nMentoring & collaboration:\nWorks alongside engineers, not just reviewing them, ie: sets the hands-on bar for the team.\nMentors’ junior engineers and interns.\nPartners with the Security Architect and the Lead; represents the domain in relevant technical forums (change and architecture review boards).\nSkills & Certifications:\nMust-have certifications:\nThis role is certification-backed. We expect current and active credentials, not lapsed ones.\nCCNP Security (350-701 SCOR core plus a relevant concentration exam). The concentrations that map directly to this role:\n300-710 SNCF - Securing Networks with Cisco Firewalls (Secure Firewall / FMC) (highly preferred or willingness to get)\n300-730 SVPN - Secure VPNs (IPSec / SSL)\n300-715 SISE - Identity Services Engine (ISE)\nAt least one current SSE vendor credential; Zscaler is preferred.\nMust-have skills:\nHands-on: Cisco FTD / FMC / ASA / Firepower; ISE; Zscaler ZIA / ZPA; Cisco Umbrella; PAC files; PKI / TLS.\nVPN: IPSec / SSL / AnyConnect / site-to-site / OOBM solutions.\nAutomation: Python, Ansible, Terraform, REST APIs.\nAIOps / observability: Splunk or equivalent.\nITIL v4 ways of working; strong RCA discipline.\nAudit literacy: NIS2, ISO 27001 (healthcare / regulated-industry experience a plus).\nClear, direct, plain-English communication.\nNice-to-haves:\nITIL Expert / Managing Professional\nCISSP / CISM / CCSP\nAWS Security Specialty / Azure Security Engineer\nPalo-Alto, Netskope or Cloudflare One exposure\nHow we work together\nWe believe that we are better together than apart. For our office-based teams, this means working in-person at least 3 days per week.\nOnsite roles require full-time presence in the company’s facilities.\nField roles are most effectively done outside of the company’s main facilities, generally at the customers’ or suppliers’ locations.\nIndicate if this role is an office/field/onsite role.\nAbout Philips\nWe are a health technology company. We built our entire company around the belief that every human matters, and we won't stop until everybody everywhere has access to the quality healthcare that we all deserve. Do the work of your life to help the lives of others.\nLearn more about our business.\nDiscover our rich and exciting history.\nLearn more about our purpose. If you’re interested in this role and have many, but not all, of the experiences needed, we encourage you to apply. You may still be the right candidate for this or other opportunities at Philips. Learn more about our culture of impact with care here.","description_format":"text","description_chars":7065,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Upper-Intermediate (B2)","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Health & Medical Electronics","Respiratory & Sleep Devices","Patient Monitoring","EHR & Clinical Software"],"lifecycle":[{"event":"open","at":"2026-10-28T11:49:03Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":1,"expected_fill_days":12,"reasons":["conf:1","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-10-30T05:48:23Z"},"pay":null,"html_url":"https://alion.io/job/philips-senior-security-operations-lead-digital-networks","json_url":"https://alion.io/job/philips-senior-security-operations-lead-digital-networks.json","meta":{"generated_at":"2026-10-30T08:03:11Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":11335,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":13838},"rest":"https://alion.io/mcp/rest/get_company?id=13838"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fphilips-senior-security-operations-lead-digital-networks"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fphilips-senior-security-operations-lead-digital-networks"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fphilips-senior-security-operations-lead-digital-networks"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/philips-senior-security-operations-lead-digital-networks\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fphilips-senior-security-operations-lead-digital-networks"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3394425}},{"tool":"search_jobs","arguments":{"company":"philips.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3394425},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}