Sr Security Engineer

The Senior Security Engineer is a senior individual contributor on Inotiv’s Information Security team, working across the organization’s security tool stack to support the company’s detection, incident response, cloud security, and vulnerability management capabilities across a global, hybrid (cloud and on-premises) environment. As part of the team, this role builds and tunes detections, hunts for threats, and supports incident response to rapidly detect, contain, and remediate threats, and helps deploy, maintain, and optimize the security tools and controls that protect company and client data. The role also contributes to cloud security and the vulnerability management program and provides technical security support for audits and vendor reviews. Reporting to the Vice President, Infrastructure & Information Security, the Senior Security Engineer is a hands-on technical contributor who participates in the on-call response rotation within a global drug discovery and development organization.

Key Accountabilities

• Build, tune, and maintain security detections and monitoring across the organization’s security tooling - EDR, endpoint, email, cloud, and network telemetry - mapping detections to the MITRE ATT&CK framework using native tool analytics and available log sources.
• Support security incident response end-to-end - detection, triage, investigation, containment, eradication, recovery, and post-incident review - perform proactive threat hunting and forensic/root-cause analysis, and participate in the on-call response rotation.
• Deploy, configure, maintain, and optimize existing and new security tools across the environment, and monitor their ongoing health and performance.
• Contribute to cloud security across Azure, AWS, and Microsoft 365 - security posture management, secure configuration and hardening, monitoring, and remediation.
• Support the vulnerability management program - scanning, risk-based prioritization, and remediation across endpoints, servers, applications, and cloud - with clear reporting and metrics.
• Administer and improve security controls and system hardening (including Windows server and workstation security), and partner with IT and infrastructure teams on remediation and security architecture.
• Provide technical information security support for audits, risk assessments, and third-party/vendor security reviews in partnership with the GRC team, and collaborate with teammates to share knowledge and improve processes.
• Other special projects and duties as assigned

Minimum Requirements

• Bachelor’s degree in Information Security, Computer Science, Information Systems, or a related field (or equivalent experience).
• 5 to 8 years of experience in security engineering, security operations, incident response, and/or vulnerability management.
• Advanced knowledge of endpoint detection and response (EDR), cloud security (Azure/AWS/Microsoft 365), vulnerability management, incident response, and the MITRE ATT&CK framework, including deploying and maintaining security tooling across a hybrid (cloud and on-premises) environment.
• Working knowledge of business-related processes, procedures, terminology, and compliance.
• Analytical thinker with the ability to understand problems, determine root cause, and recommend appropriate solutions.
• Excellent verbal and written communication skills, able to relate complex concepts in a concise and easy-to-understand manner.
• Ability to prioritize and handle multiple projects, often under tight time constraints.
• Ability to work effectively with peers, leadership, and stakeholders in a productive, collaborative environment.
• Ability to understand and comply with confidentiality and privacy rules and protect company property and confidential information.

Preferences

• 2+ years of experience in a regulated life sciences environment or a large/complex enterprise.
• Certifications preferred: GCIH, GCIA, GCFA, GREM, OSCP, CISSP, or a cloud security certification (e.g., AZ-500, AWS Security).
• Experience with EDR, cloud security posture management (CSPM), and vulnerability management platforms.
• Scripting and automation experience (e.g., Python, PowerShell, KQL).
• Preference given to relevant work experience.

Working Conditions & Physical Requirements

• Extended computer and display screen equipment usage
• Ability to read and interpret materials, verbally communicate, and hear required.

Critical Success Factors

• Results Driven. Internal drive toward action to efficiently, timely, and accurately achieve results. Sets high but achievable standards for self and others. Seeks opportunities to improve process and outcomes. Constantly reviews performance to identify areas to develop.
• Efficient. Takes responsibility for own time and effectiveness. Identifies what needs to be done and does it before being asked or before the situation requires it. Able to work things out without having to be shown too often. Seeks opportunities to contribute appropriately without direction.
• Communication. Able to communicate information and ideas clearly and articulately both in oral and written form. Uses appropriate language, style and methods depending on audience and the purpose of communication. Able to convey complex information clearly. Anticipates the information that others will need. Expresses ideas effectively. Practices attentive and active listening.
• Collaboration. Actively supports and contributes to the success of the team. Actively encourages and practices collaboration and cooperation on the team. Shares information and supports other team members. Can get things done with and through others and set realistic objectives. Seeks opportunities to develop others.
• Critical Thinking and Problem Solving. Able to identify and separate out the key components of problems and situations. Able to manipulate and interpret information from a range of sources to spot patterns and trends in information and to deduce cause and effect from this. Can generate a range of creative solutions, evaluate, and choose the most appropriate option
• Improvement Driven. Inspires and generates new solutions and approaches to issues and challenges to maximize efficiency and effectiveness through everyday practice of root cause analysis and critical thinking problem solving; Continually works to refine skills and abilities; Builds on ideas of others to come up with new ways to address issues or problems; Generates creative new solutions and approaches to issues and processes.

*This position could be offered at different levels for candidates who qualify with a combination of advanced levels of education and/or years of experience. The salary range will adjust along with the level of the role to match the person’s relevant experience and/or education level.

At Inotiv, our work helps advance the development of new medicines and therapies that can improve people's lives. As a leading global contract research organization (CRO), we partner with researchers to tackle complex scientific challenges, drive innovation, and help build a healthier, safer world. Bringing together scientists, researchers, technical experts, and business professionals, we provide the expertise and collaboration needed to move research forward. Our people make this work possible, and we value the knowledge, ideas, and contributions each person brings to the team. Whether you are starting your career or bringing years of experience, Inotiv offers opportunities to learn, grow, and play a meaningful role in advancing treatments for patients around the world.

Salary will be commensurate with experience and responsibilities. Benefits include health and dental coverage, short- and long-term disability, paid time off, paid parental leave, 401K, and more!

Inotiv is an Equal Opportunity Employer. It is our policy to provide a fair and equal employment opportunity to all persons, regardless of age, race, color, religion, sex, gender, gender identity, gender expression, sexual orientation, genetic information, disability, national origin, veteran status, or any other basis prohibited by law. This policy governs all aspects of employment, including selection, job assignment, compensation, discipline, termination and access to benefits and training.