{"id":4170730,"url":"https://alion.io/job/iovance-biotherapeutics-security-engineer-ii","title":"Security Engineer II","company":{"id":449873,"name":"Iovance Biotherapeutics","domain":"iovance.com","url":"https://alion.io/company/iovance-biotherapeutics","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":94,"open_postings":4,"ghost_share":0,"stale_share":0.25,"repost_share":0,"time_to_fill_p50_days":48,"computed_at":"2026-11-12T10:38:37Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":125000,"max":140000,"currency":"USD","period":"year","gross":null,"usd_annual":140000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"21 CFR Part 11","optional":false},{"name":"Active Directory","optional":false},{"name":"Amazon EC2","optional":false},{"name":"Amazon ECS","optional":false},{"name":"Amazon S3","optional":false},{"name":"AWS","optional":false},{"name":"AWS WAF","optional":false},{"name":"Bash","optional":false},{"name":"BeyondTrust","optional":false},{"name":"CI/CD","optional":false},{"name":"CloudFormation","optional":false},{"name":"Crowdstrike","optional":false},{"name":"CyberArk","optional":false},{"name":"Delinea","optional":false},{"name":"Dependabot","optional":false},{"name":"DLP","optional":false},{"name":"DNS","optional":false},{"name":"GitHub","optional":false},{"name":"GitHub Actions","optional":false},{"name":"HIPAA","optional":false},{"name":"IAM","optional":false},{"name":"LDAP","optional":false},{"name":"Least Privilege","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"NIST 800-53","optional":false},{"name":"NIST CSF","optional":false},{"name":"Okta","optional":false},{"name":"OneDrive","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SharePoint","optional":false},{"name":"SIEM","optional":false},{"name":"Terraform","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-11-12T13:29:19Z","employer_posted_date":"2026-11-12","last_verified_at":"2026-11-12T14:39:42Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"AboutIovance Biotherapeutics, Inc. \nIovance Biotherapeutics, Inc. is the global leader in innovating, developing, and delivering tumor infiltrating lymphocyte (TIL) cell therapies for patients with solid tumors. Amtagvi® (lifileucel) is the first FDA-approved, one-time treatment for previously treated advanced melanoma, now approved in three global markets and available at more than 95 authorized treatment centers. The Iovance TIL platform spans registrational trials and next-generation programs in additional solid tumors, including gene-edited and IL-12 tethered TIL therapies, next-generation IL-2, and precision immuno-oncology approaches. As the first and only company to take TIL therapy from concept to a broadly accessible commercial treatment, Iovance operates as an end-to-end cell therapy company, anchored by fully owned, centralized U.S.-based manufacturing that is scaled to serve thousands of cancer patients worldwide each year. For more information, please visit www.iovance.com. \nAmtagvi® and its accompanying design marks, Proleukin®, Iovance®, and IovanceCares™ are trademarks and registered trademarks of Iovance Biotherapeutics, Inc. or its subsidiaries. All other trademarks and registered trademarks are the property of their respective owners. \nInformation on Iovance’s broad, industry-leading patent portfolio is available on the Intellectual Property page on www.iovance.com. \nOverview \nWe are seeking a hands-on Security Engineer with strong technical depth across endpoint, cloud, identity, and email security. This role designs, deploys, and operates Iovance’s core security platforms, including CrowdStrike Falcon EDR and Next-Gen SIEM, privileged access management, Mimecast, AWS security services, and GitHub security. The right candidate builds policy, writes detections and automation, troubleshoots across the stack, and documents their work to the standard expected in a validated, audit-ready environment.\nEssential Functions and Responsibilities\nEndpoint Detection, SIEM & Response (CrowdStrike)\nAdminister and tune CrowdStrike Falcon prevention policies, host groups, device control, and sensor updates across Windows, macOS, and Linux, with careful exclusion management for GxP and manufacturing systems.\nOnboard and normalize log sources (Okta, AWS, Mimecast, GitHub, PAM, servers) into Falcon Next-Gen SIEM, and build detections, dashboards, and Falcon Fusion SOAR workflows.\nInvestigate alerts, conduct threat hunting, and drive containment and remediation.\nPrivileged Access Management\nOperate the enterprise PAM platform, including vaulting, credential rotation, session recording, and just-in-time access for servers, cloud accounts, databases, and service accounts.\nIntegrate PAM with Okta and Active Directory, and support privileged access reviews and segregation-of-duties controls.\nEmail Security (Mimecast)\nAdminister Mimecast targeted threat protection, DLP, archiving, and continuity policies, and maintain SPF, DKIM, and DMARC.\nInvestigate phishing, impersonation, and business email compromise attempts.\nCloud & DevSecOps Security (AWS, Microsoft 365 & GitHub)\nSecure AWS workloads including EC2, ECS, ELB/ALB, S3, and VPC networking, using AWS WAF, IAM, KMS, GuardDuty, Security Hub, Config, and CloudTrail.\nIdentify and remediate misconfigurations, enforce least privilege, and review infrastructure-as-code (Terraform/CloudFormation).\nHarden and monitor Microsoft 365, including Entra ID Conditional Access, Exchange Online, SharePoint/OneDrive/Teams sharing controls, Microsoft Purview DLP and sensitivity labels, and Microsoft Secure Score recommendations.\nAdminister GitHub Advanced Security (code scanning, secret scanning, Dependabot), branch protection, and organization policies, and secure GitHub Actions pipelines using OIDC federation to AWS.\nGovernance, Compliance & Operations\nAuthor technical documentation, standards, and runbooks suitable for GxP, SOX, and HIPAA audits, and provide audit evidence.\nParticipate in change control, vulnerability and patch management, incident response, and on-call rotation. \nRequired Education, Skills, and Knowledge \nBachelor’s degree in Computer Science, Information Security, or a related field, or equivalent experience.\n5+ years of hands-on experience in security engineering or cloud security.\nHands-on experience with CrowdStrike Falcon EDR and a SIEM platform, preferably Falcon Next-Gen SIEM (LogScale), including detection development.\nExperience administering an enterprise PAM solution (e.g., CyberArk, BeyondTrust, Delinea).\nExperience with Mimecast or a comparable secure email gateway.\nPractical experience securing AWS environments (EC2, ECS, ELB, S3, WAF, IAM, VPC).\nHands-on experience securing Microsoft 365, including Entra ID, Conditional Access, Exchange Online, and Purview.\nWorking knowledge of GitHub security features and CI/CD security.\nSolid foundation in networking, DNS, TLS, and identity protocols (SAML, OIDC, OAuth, LDAP).\nScripting experience in Python, PowerShell, or Bash.\nStrong written communication and audit-ready documentation skills. \nPreferred Education, Skills, and Knowledge\nExperience in a regulated life sciences or healthcare environment (GxP, 21 CFR Part 11, HIPAA, SOX).\nExperience with Okta and Microsoft Entra ID/Intune.\nFamiliarity with Terraform, NIST CSF, NIST 800-53, and CIS Controls.\nCertifications such as CrowdStrike CCFA/CCFR/CCFH, AWS Certified Security - Specialty, CISSP, or GIAC.\nPhysical Demands and Activities Required\nThe physical demands described here represent those an employee may encounter while performing the essential functions of this job. Reasonable accommodation may be provided to enable individuals to perform these functions.\nAbility to remain in a stationary position for extended periods\nAbility to move about within an office or remote workspace and exert up to 10 pounds of force occasionally\nVisual acuity sufficient for preparing and analyzing data, viewing computer screens, and extensive reading\nRepetitive motion involving wrists, hands, and/or fingers\nAbility to communicate effectively to exchange information\nAbility to engage in analytical, conceptual, and problem-solving activities in a dynamic business environment \nMental: Clear and conceptual thinking ability; excellent judgment, troubleshooting, problem-solving, analysis, and discretion; ability to handle work-related stress; ability to handle multiple priorities simultaneously with a sense of urgency; and ability to meet deadlines\nWork Environment\nThis job operates in a professional or remote office environment and requires operating standard office equipment and keyboards.\nThe annual base salary we reasonably expect to pay is listed. Individual pay decisions depend on various factors, such as primary work location, complexity and responsibility of the role, job duties/requirements, and relevant education, experience and skills. \nPay Transparency\n$125,000—$140,000 USD\nThe statements contained in this document are intended to describe the general nature and level of work being performed by a colleague assigned to this description. They are not intended to constitute a comprehensive list of functions, duties, or local variances. Management retains the discretion to add or to change the duties of the position at any time.\nIovance is committed to cultivating and offering a diverse and inclusive work environment. As an equal-opportunity employer, our employees and applicants will be considered without regard to an individual’s race, color, religion, sex, pregnancy, national origin, age, physical and mental disability, marital status, sexual orientation, gender identity, gender expression, genetic information, military and veteran status, and any other characteristic protected by applicable law. If you need assistance or accommodation to apply to one of our opportunities, please contact . \nBy voluntarily providing information and clicking “Submit Application”, you explicitly consent to the collection and use of your personal information for the purposes described above and in our Candidate Privacy Notice.","description_format":"text","description_chars":8120,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cell & Gene Therapy","Biologics & Biosimilars","Oncology Therapeutics"],"lifecycle":[{"event":"open","at":"2026-11-12T14:39:42Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 3 · green card filings: 2","filings_12m":3,"filings_prev_12m":12,"green_card_filings_12m":2,"median_offered_wage_usd":183500,"route":null,"cap_exempt":false,"checked_at":"2026-11-12T07:36:15+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":48,"reasons":["conf:1","win:early"],"computed_at":"2026-11-12T16:19:25Z"},"pay":{"stated_usd_annual":140000,"is_top_pay":true},"html_url":"https://alion.io/job/iovance-biotherapeutics-security-engineer-ii","json_url":"https://alion.io/job/iovance-biotherapeutics-security-engineer-ii.json","meta":{"generated_at":"2026-11-12T16:19:25Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":34162,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":449873},"rest":"https://alion.io/mcp/rest/get_company?id=449873"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fiovance-biotherapeutics-security-engineer-ii"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fiovance-biotherapeutics-security-engineer-ii"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fiovance-biotherapeutics-security-engineer-ii"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/iovance-biotherapeutics-security-engineer-ii\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fiovance-biotherapeutics-security-engineer-ii"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4170730}},{"tool":"search_jobs","arguments":{"company":"iovance.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4170730},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}