Security Engineer & Analyst

About the position

Responsibilities

• Architect and maintain security posture across Azure, AWS, and Microsoft 365/Entra ID environments.
• Design and implement Zero/Low Implicit Trust architecture with Conditional Access policies, MFA enforcement, and Privileged Identity Management (PIM).
• Configure and maintain Azure Security Center, AWS Security Hub, and native cloud security controls.
• Implement secure baselines for cloud workloads, storage, and networking components.
• Manage identity lifecycle, RBAC, and least-privilege access models across cloud and SaaS platforms.
• Administer endpoint protection platforms (EDR/XDR) across Windows 11 and macOS devices.
• Deploy and maintain Intune policies for Windows endpoints including BitLocker encryption, Windows Defender, and compliance baselines.
• Implement macOS security controls using MDM solutions (Jamf/Kandji or Intune for Mac).
• Secure shared laboratory and manufacturing endpoints using kiosk modes and restricted profiles.
• Orchestrate patch management, software deployment, and configuration drift monitoring for endpoints.
• Design and tune SIEM alerting rules (e.g., Azure Sentinel, Splunk, or similar) to minimize false positives while detecting critical events.
• Lead incident response activities including communication with MDR vendor, triage, forensics, containment, eradication, and recovery.
• Conduct threat hunting exercises and security investigations based on logs, alerts, and intelligence.
• Maintain incident response runbooks and coordinate tabletop exercises.
• Generate security metrics, KPIs, and executive-level reporting.
• Support FDA, SOC 2, CMMC, and GxP audit activities through evidence collection, documentation, and remediation tracking.
• Perform vulnerability assessments and coordinate remediation efforts with relevant teams.
• Conduct vendor security assessments and manage third-party risk.
• Develop and maintain security policies, standards, and procedures.
• Partner with QA/Compliance teams on 21 CFR Part 11 and data integrity requirements.

Requirements

• Endpoint Management: Strong Intune experience for Windows; familiarity with macOS MDM solutions (e.g. Intune, Jamf, or similar).
• Security Tools: Hands-on experience with EDR/XDR platforms such as Huntress, CrowdStrike, Defender for Endpoint, or SentinelOne.
• SIEM/Monitoring: Experience with Azure Sentinel, Splunk, or similar platforms, including log analysis and correlation.
• Scripting: Proficiency in PowerShell and Python for security automation and orchestration.
• Networking: Understanding of network segmentation, firewalls, VPNs, and zero-trust principles.
• Clear technical writing skills for documentation, procedures, and audit artifacts.
• Ability to translate security risks into business impact for non-technical stakeholders.
• Strong problem-solving skills with high attention to detail.
• Self-motivated with the ability to work independently in a hybrid environment.

Nice-to-haves

• 2+ years in biotech, pharma, medical device, or healthcare IT environments
• Familiarity with FDA 21 CFR Part 11, EU Annex 11, NIST frameworks, CMMC, and/or SOC 2
• AZ-500, SC-200, SC-300, AWS Security Specialty, CISSP, CCSP, or comparable security certifications
• Experience with Infrastructure as Code (e.g., Terraform, ARM templates)
• Container security experience (e.g., Docker, EC2-based workloads)
• DevSecOps practices and CI/CD pipeline security
• Experience with Data Loss Prevention (DLP) and Cloud Access Security Broker (CASB) solutions

Benefits

• Stock bonus
• Health, Dental, and Vision premiums fully covered by Lumen
• 401k match up to 4%
• Industry-leading PTO policy, paid refresh days, and paid year-end holiday office closure
• Monthly wellness program to support your health and well-being
• Free onsite parking or public transportation subsidies
• Comprehensive parental leave policies
• Life insurance, short & long-term disability, and access to employee assistance programs

Apply tot his job Apply To this Job