information security engineer for clinical research

Описание:

Medpace is a full-service clinical contract research organization providing phase I–IV clinical development services to the biotechnology, pharmaceutical, and medical device industries. It advances clinical research to support the global development of safe and effective medical therapeutics.

Задачи:

• Design, deploy, and maintain enterprise security solutions with minimal oversight, collaborating with global IT teams to protect Medpace’s systems;
• Own the administration and reliability of key security platforms, including privileged access management, EDR, and SIEM;
• Coordinate platform upgrades and fixes proactively;
• Lead cross-functional security projects from planning through execution;
• Coordinate with stakeholders across departments to deliver security project results;
• Serve as a technical escalation point for complex security incidents and issues;
• Independently investigate and resolve advanced security problems, especially during off-hours for global coverage;
• Provide guidance to SOC Analysts and IT teams as needed;
• Improve and automate security operations by developing scripts, integrations, and workflows;
• Build security automation in cloud or SIEM environments;
• Integrate security into enterprise systems and processes;
• Work with Network, Cloud, and DevOps teams to embed security controls and best practices into infrastructure and software lifecycles;
• Document architectures, procedures, and solutions;
• Share security knowledge and mentor and cross-train team members, especially developing Analysts;
• Research emerging security threats, technologies, tools, and techniques to improve the organization’s security posture.

Требования:

• Bachelor’s degree in Information Systems, Cybersecurity, or a related field;
• 4+ Years of experience in IT or Information Security, including at least 2 years in a security engineering role or similar;
• In-depth knowledge of enterprise IT environments, including Windows Server/Active Directory, networks, and cloud architectures;
• Experience securing Azure cloud architectures;
• Hands‑on experience with SIEM, endpoint detection and response, identity or privileged access management, and cloud security tools;
• Excellent communication and documentation skills;
• Ability to explain complex security concepts to technical and non‑technical stakeholders;
• Strong analytical and problem‑solving skills;
• Ability to independently troubleshoot and resolve complex security issues;
• Proficiency in scripting or automation with PowerShell or Python;
• Self‑motivated and committed to continuous learning;
• Ability to quickly adapt to new technologies and evolving threats;
• Nice to have: DevSecOps pipeline security, cloud security architecture with Azure or AWS, network segmentation, AI governance, advanced identity management, red‑team or pentesting, enterprise vulnerability management tools, regulated industries, ISO 27001, NIST, GDPR.

Условия:

• Competitive compensation programs that recognize and reward performance;
• Comprehensive health, wellness, retirement, and PTO benefits;
• Office-based environment with on‑site mentors;
• Defined career paths with clear advancement opportunities;
• Industry‑renowned onboarding and training programs;
• Ongoing training and continuous learning opportunities;
• Company‑sponsored social events;
• Occasional WFH may be available for eligible positions after training;
• Benefits may vary by country.

#J-18808-Ljbffr