Associate Digital Product Manager, Information Security (DevSecOps)
Job Description
At Genmab, we’re committed to building extra[not]ordinary futures together, by developing antibody products and pioneering, knock-your-socks-off therapies that change the lives of patients and the future of cancer treatment and serious diseases. From our people who are caring, candid, and impact-driven to our business, which is innovative and rooted in science, we believe that being proudly unique, determined to be our best, and authentic is essential to fulfilling our purpose.
Primary Responsibilities
We are looking for an experienced and pragmatic individual for the role of DevSecOps Engineer to join our global information security team. In this pivotal role, you will be at the forefront of integrating security into every aspect of our development and operational processes. As a vital member of our team, you will work closely with developer and operation teams from other IT and business disciplines to create secure, seamless, and robust applications and infrastructure. Your expertise in various aspects of security, CI/CD pipelines, agile product development and cloud services will play a key role in advancing our security posture.
We ask our employees to be able to work independently and be result driven. But at Genmab we ask more … we ask to be part of a team that has a passion for the work and knows exactly why we are doing what we are doing. We know that our colleagues around us have the same passion and are all driven to make this company a better company. We also know that we work better as a team and are willing to take acceptable risks when required.
If you are passionate about building secure and efficient systems and thrive in a dynamic, collaborative environment, we would love to have you onboard.
Primary Contacts
Reports to Principal Security Officer – US
Global Head of IT Security & Risk Management
DevSecOps CoE personnel from IT Infrastructure & Operations team and IT Commercialization & Enabling Functions team
Principal Security Officer – DK, NL
Members of IT & Digital Leadership Team
Solution Architects
Scrum Masters and Product Owner from different product development teams
Responsibilities
Integrate Security in CI/CD: Implement and maintain security measures and controls in CI/CD pipelines to ensure the security of software from development to deployment.
Vulnerability Management: Regularly scan for, identify, and remediate vulnerabilities in code, dependencies, and deployed infrastructure.
Security Automation: Develop and implement automation scripts to integrate security testing and compliance checking into the development lifecycle.
Collaboration and Training: Work closely with development and operations teams to raise security awareness and develop best practices.
Cloud Security: Implement and manage security policies, controls, and best practices in cloud environments.
Continuous Improvement: Stay abreast of the latest security threats and technologies to continuously improve Genmab’s security posture.
Job Requirements
Education
Minimum of a Bachelor’s degree in computer science, information systems, engineering or related technical field or equivalent work experience. Master’s level degree preferred.
Experience
5+ years of experience in DevSecOps role or similar
5+ years of experience with software security, secure coding, or software assurance tools and techniques.
Deep knowledge and understanding of Agile & DevOps methodologies
Proficient with CI/CD tools (e.g., Jenkins, GitLab) and automation scripting (e.g., Python, Bash).
Familiarity with containerization and orchestration technologies (Docker, Kubernetes).
Knowledge of infrastructure as code (IaC) tools (e.g., Terraform, Ansible).
Solid experience with Compliance (Regulatory and Industry) and Security frameworks
Demonstrated experience in working in multinational organization and virtual teams.
Demonstrated experience of influencing key stakeholders across the organization and within complex contexts.
Knowledge/Skills
Provide strategic direction and subject matter expertise for wide adoption of DevSecOps automation.
Build and maintain DevSecOps pipelines to adopt shift-left paradigm for security testing (SAST, DAST, IAST, RASP etc.)
Develop and promote best practices for DevSecOps and secure CI/CD.
Stay up-to-date on new security tools & techniques, and act as driver of innovation and process maturity.
Perform threat modelling and design reviews to assess security implications of new code deployments.
Work with DevOps teams and managers to train and educate product teams on information security concepts and standards (e.g. OWASP ASVS)
Deliver presentation to IT and business representatives on security technologies and industry trends
Excellent contact skills being able to communicate effectively with different stakeholders and to deal with the different interests in the organization.
Excellent analytical, strategic conceptual thinking, strategic planning and execution skills
Ability to build consensus, making decisions based on many variables, and gain support for major initiatives.
Strong sense of self, ethics and effort, as well as the willingness to go the extra mile to achieve important goals.
Excellent verbal and written communication skills, including the ability to explain security requirements to IT leaders.
Strong soft and interpersonal skills, including teamwork, facilitation and negotiation
Working Conditions
Travel required: Company-specific
Domestic: Rarely
International: Rarely
Telecommuting option: 4 days per week
For US based candidates, the proposed salary band for this position is as follows:
$114,375.00—$190,625.00
The actual salary offer will carefully consider a wide range of factors, including your skills, qualifications, experience, and location. Also, certain positions are eligible for additional forms of compensation, such as bonuses.
About You
You are passionate about our purpose and genuinely care about our mission to transform the lives of patients through innovative cancer treatment
You bring rigor and excellence to all that you do. You are a fierce believer in our rooted-in-science approach to problem-solving
You are a generous collaborator who can work in teams with diverse backgrounds
You are determined to do and be your best and take pride in enabling the best work of others on the team
You are not afraid to grapple with the unknown and be innovative
You have experience working in a fast-growing, dynamic company (or a strong desire to)
You work hard and are not afraid to have a little fun while you do so
Locations
Genmab leverages the effectiveness of an agile working environment, when possible, for the betterment of employee work-life balance. Our offices are designed as open, community-based spaces that work to connect employees while being immersed in our state-of-the-art laboratories. Whether you’re in one of our collaboratively designed office spaces or working remotely, we thrive on connecting with each other to innovate.
About Genmab
Genmab is an international biotechnology company with a core purpose guiding its unstoppable team to strive towards improving the lives of patients through innovative and differentiated antibody therapeutics. For more than 20 years, its passionate, innovative and collaborative team has invented next-generation antibody technology platforms and leveraged translational research and data sciences, which has resulted in a proprietary pipeline including bispecific T-cell engagers, next-generation immune checkpoint modulators, effector function enhanced antibodies and antibody-drug conjugates. To help develop and deliver novel antibody therapies to patients, Genmab has formed 20+ strategic partnerships with biotechnology and pharmaceutical companies. By 2030, Genmab’s vision is to transform the lives of people with cancer and other serious diseases with Knock-Your-Socks-Off (KYSO™) antibody medicines.
Established in 1999, Genmab is headquartered in Copenhagen, Denmark with locations in Utrecht, the Netherlands, Princeton, New Jersey, U.S. and Tokyo, Japan.
Our commitment to diversity, equity, and inclusion
We are committed to fostering workplace diversity at all levels of the company and we believe it is essential for our continued success. No applicant shall be discriminated against or treated unfairly because of their race, color, religion, sex (including pregnancy, gender identity, and sexual orientation), national origin, age, disability, or genetic information. Learn more about our commitments on our website.
Genmab is committed to protecting your personal data and privacy. Please see our privacy policy for handling your data in connection with your application on our website https://www.genmab.com/privacy.
Please note that if you are applying for a position in the Netherlands, Genmab’s policy for all permanently budgeted hires in NL is initially to offer a fixed-term employment contract for a year, if the employee performs well and if the business conditions do not change, renewal for an indefinite term may be considered after the fixed-term employment contract.
Apply via. this link: https://genmab.wd3.myworkdayjobs.com/en-US/Genmab_Careers_Site/details/Associate-Digital-Product-Manager–Information-Security–DevSecOps-_R9781?locationCountry=49ab063f422741e2aef271de00efeac8&locations=41c11cb1d9c4016f2f5b93661b15dc2d