Senior Security Engineer

• Build, tune, and maintain security detections and monitoring across EDR, endpoint, email, cloud, and network telemetry
• Map detections to the MITRE ATT&CK framework using native tool analytics and available log sources
• Support security incident response end-to-end, including detection, triage, investigation, containment, eradication, recovery, and post-incident review
• Perform proactive threat hunting and forensic/root-cause analysis
• Participate in the on-call response rotation
• Deploy, configure, maintain, and optimize security tools and monitor their health and performance
• Contribute to cloud security across Azure, AWS, and Microsoft 365
• Support vulnerability scanning, risk-based prioritization, remediation, reporting, and metrics
• Administer and improve security controls and system hardening, including Windows server and workstation security
• Partner with IT and infrastructure teams on remediation and security architecture
• Provide technical information security support for audits, risk assessments, and third-party/vendor security reviews
• Collaborate with teammates to share knowledge and improve processes
• Complete other special projects and duties as assigned

• Bachelor’s degree in Information Security, Computer Science, Information Systems, or a related field (or equivalent experience)
• 5 to 8 years of experience in security engineering, security operations, incident response, and/or vulnerability management
• Advanced knowledge of endpoint detection and response (EDR), cloud security (Azure/AWS/Microsoft 365), vulnerability management, incident response, and the MITRE ATT&CK framework
• Experience deploying and maintaining security tooling across a hybrid (cloud and on-premises) environment
• Working knowledge of business-related processes, procedures, terminology, and compliance
• Ability to understand problems, determine root cause, and recommend solutions
• Excellent verbal and written communication skills
• Ability to prioritize and handle multiple projects under tight time constraints
• Ability to work effectively with peers, leadership, and stakeholders
• Ability to comply with confidentiality and privacy rules and protect company property and confidential information
• 2+ years of experience in a regulated life sciences environment or a large/complex enterprise preferred
• Certifications preferred: GCIH, GCIA, GCFA, GREM, OSCP, CISSP, or a cloud security certification (e.g., AZ-500, AWS Security)
• Experience with EDR, cloud security posture management (CSPM), and vulnerability management platforms preferred
• Scripting and automation experience (e.g., Python, PowerShell, KQL) preferred

• Health and dental coverage
• Short- and long-term disability
• Paid time off
• Paid parental leave
• 401K