Join a Market Leader:
About Hovione
At Hovione, we help partners turn scientific innovation into medicines that reach patients around the world. For more than 65 years, we have connected science, technology, and manufacturing to scale complex ideas into high-quality and innovative solutions that truly make a difference.
As an international Contract Development and Manufacturing Organization (CDMO), we support the development and manufacture of drug substances, intermediates, and drug products across the full life cycle. We are globally recognized for our leadership in specialized technologies such as Spray Drying and Continuous Tableting. But what truly sets us apart is not just what we do — it is how we do it: with purpose, care, collaboration, and a deep commitment to doing the right things right.
Our people are the reason for our success. We are a global and diverse team of more than 2,600 team members across Europe, the USA, and Asia, bringing together different experiences and perspectives to help our partners to overcome complex challenges. We believe that an inclusive environment — where everyone, regardless of background, identity or ability, is respected, heard and empowered to contribute — is essential to drive innovation, ensure quality, and secure long‑term sustainable success.
And as we grow, so do the opportunities for our people to develop, broaden their perspectives, and build meaningful careers. Because at Hovione, better starts with those who choose to make a difference every day. Will you be one of them?
You will be responsible to::
- Support the implementation and continuous evolution of Hovione's Cyber Defense strategy, operational roadmap, and security monitoring capabilities aligned with business, regulatory, and risk management requirements;
-
Perform triage, analysis, classification, escalation, and coordination of security alerts, events, and incidents, ensuring timely and effective response activities;
-
Lead and coordinate investigations of complex cybersecurity incidents, including ransomware, advanced persistent threats (APT), supply chain attacks, and insider threat scenarios;
-
Operate as a key stakeholder within the CSIRT function, supporting incident containment, eradication, recovery efforts, post-incident reviews, and lessons learned initiatives;
-
Develop, maintain, and continuously improve detection use cases, SIEM correlation rules, SOAR automation workflows, playbooks, and runbooks to increase operational effectiveness and reduce false positives;
-
Conduct proactive threat hunting activities leveraging threat intelligence, MITRE ATT&CK methodologies, behavioral analytics, and emerging threat indicators;
-
Manage and optimize Hovione's SIEM platform, ensuring effective log collection, integrations, correlation logic, monitoring coverage, and alerting capabilities;
-
Collaborate with internal and external stakeholders, including managed security providers, national CERTs, regulatory authorities, and law enforcement agencies during significant cyber events;
-
Support cybersecurity monitoring and incident response activities across Operational Technology (OT) and Industrial Control System (ICS) environments, ensuring business continuity and operational resilience;
-
Contribute to Business Continuity and Disaster Recovery (BCDR) preparedness by participating in tabletop exercises, cyber simulations, response testing, and resilience improvement initiatives.
We are looking to recruit a Candidate::
- Bachelor's Degree in Information Technology, Cybersecurity, Computer Science, Engineering, or a related scientific discipline;
-
Minimum of 8 years of cybersecurity experience, including at least 5 years in a senior role within a Cyber Defense Center, Security Operations Center (SOC), CSIRT, Managed Security Services Provider (MSSP), or similar environment;
-
Demonstrated experience leading or coordinating response efforts for major cybersecurity incidents, including ransomware, nation-state threats, and large-scale security breaches;
-
Strong hands-on expertise with CrowdStrike technologies, including CrowdStrike Falcon, CrowdStrike Next-Generation SIEM, and CrowdStrike SOAR;
-
Proven experience developing and tuning SIEM detection rules, security event correlations, threat detection content, and automated incident response playbooks;
-
Deep understanding of MITRE ATT&CK (Enterprise and ICS), cyber threat intelligence, threat hunting methodologies, and digital risk monitoring practices;
-
Solid knowledge of OT/ICS cybersecurity principles, industrial environments, and security monitoring approaches for critical operational systems;
-
Professional fluency in English, supported by excellent analytical, communication, stakeholder management, and problem-solving skills.
Hovione is a proud Equal Opportunity Employer
Inclusion and diversity are key to us. We are committed to creating an inclusive recruitment experience and welcome applications from all qualified candidates. If you require any reasonable accommodation or support during the application or interview process, please contact us, and we will be happy to assist.
Notice to Agencies and Search Firms Representatives
Hovione does not accept unsolicited resumes from agencies or search firms for this job posting. Any resumes submitted to Hovione by a third-party agency or search firm without a valid written and signed search agreement will become the sole property of Hovione. No fees will be paid if a candidate is hired for this position as a result of an unsolicited referral.
