Information Security Engineer

Background

Accumulus Synergy is a nonprofit trade association working on behalf of industry to address the global need for digital transformation. To help solve for this need, Accumulus is developing a transformative data exchange platform to enable enhanced collaboration and efficiency between life sciences organizations and National Regulatory Authorities worldwide. The Accumulus Platform aims to improve efficiencies in the regulatory process by leveraging advanced technology, including data science and AI, as well as tools for secure data exchange to improve patient safety, help reduce the cost of innovation, and ultimately bring patients safe and effective medicines faster. Accumulus is working with key stakeholders in the life sciences - regulatory ecosystem to build and sustain a platform that aims to meet regulatory, cybersecurity, and privacy requirements spanning clinical, safety, chemistry and manufacturing, and regulatory exchanges and submissions. Accumulus Synergy sponsors include Amgen, Astellas, AstraZeneca, GSK, Johnson & Johnson, Lilly, Merck, Pfizer, Roche, Sanofi, and Takeda.

Job Description

Reporting to the Principal Security Architect, this role is essential in implementing and maintaining the security measures to safeguard our technology infrastructure against potential threats. The ideal candidate will have a solid foundation in information security principles, be detail-oriented, and possess a strong technical aptitude.

Responsibilities

• Establish and apply comprehensive security hardening standards for Microsoft Azure cloud services, third-party SaaS applications, operating systems, databases, networks, and applications to protect against vulnerabilities and enhance our security posture.
• Conduct configuration assessments to identify misconfigurations within the technology stack, working closely with relevant teams for timely remediation.
• Assist in security risk assessments, audits, and compliance checks to ensure adherence to hardening standards and security best practices.
• Maintain up-to-date documentation of hardening procedures, standards, and security configurations.
• Work collaboratively with IT, DevOps, and software engineering teams to integrate security practices into the development and operational processes.
• Stay informed about the latest security threats, technologies, and best practices to suggest improvements to hardening standards and procedures.
• Contribute to the development and delivery of security training programs to increase security awareness across the organization.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or related field, or equivalent experience.
• Security industry relevant certifications (e.g., CISSP, CSSP, GSEC, GCSA)
• At least 2 years of experience in information security, specifically in implementing security controls and hardening technologies.
• At least 3 years of experience in Microsoft Azure cloud environments.
• Familiarity with security frameworks (e.g., NIST, CIS Benchmarks) and understanding of the current threat landscape.
• Experience creating secure templates for IaC tools like Terraform, ansible, and etc.
• Experience automating the enforcement of security standards, such as security configuration tools.
• Strong problem-solving skills and attention to detail.
• Excellent communication skills, with the ability to articulate technical information to non-technical audiences.
• A proactive approach to learning and staying updated on new technologies and security trends.
• Team-oriented mindset with a strong capability to work collaboratively across different departments.

Benefits

While we hope the Accumulus mission is what really attracts you, we also have a lot to offer. Organizations are built by great people, and to attract great people you need to offer a great employee experience. Accumulus can provide:

• Very competitive compensation w/ bonus plan. We must compete with big names in tech & pharma for top talent and compensate accordingly.
• 401(k) contribution, immediately vested
• A full benefits package: multiple health plans, vision, dental, life, and disability insurance
• 100% remote work. Accumulus is a fully remote organization, and we intend to remain so
• Experienced leadership to mentor you. We have drawn successful leaders from the biopharma industry with a deep understanding of regulatory affairs and combined them with similarly successful leaders in SaaS product development. Learning opportunities abound.

Unsolicited Contact Policy

Please note that we do not consider resumes submitted by unsolicited third-party recruitment firms. Additionally, we kindly request that candidates refrain from sending unsolicited resumes or making unsolicited contact directly to Accumulus employees. To be considered for any open positions, please utilize our online job application system. We appreciate your cooperation and understanding.

Important Notice: Please note that all official communication from Accumulus Synergy Inc. regarding this job application will be conducted through an email address ending in @accumulus.org. If you receive any communication from an email address that does not match this domain, please disregard it as it may not be legitimate.