IT Security Engineer

The Opportunity

insitro is a drug discovery and development company using machine learning and data generation at scale to transform the way that drugs are discovered and delivered to patients.  Information Security provides a critical foundation for our work due to our unique approach of combining high throughput biology, machine learning and software engineering for drug discovery.  

As a Security Engineer at insitro, your role is critical to defending our company’s key data and systems.  You will apply your knowledge, experience, and communication skills to defend insitro and  support our mission to help patients.  

Working closely with IT, DevOps, and security vendors, you will implement or oversee the implementation of technologies and controls to better secure systems and software.  You will also manage and participate in projects that have broad impact and visibility across the organization.   

This role requires someone who is friendly, organized, technically proficient, can multi-task,  enjoys being part of a team,  and thrives solving issues in a timely manner.  Occasional evening and weekend work will be required. 

This is an excellent opportunity for someone passionate about therapeutic discovery and making an impact to patients!

Position Overview

Security Configuration Support and Analysis

• Protect network and endpoint systems in accordance to policies, procedures and guidelines
• Configure and manage security controls for SaaS applications, such as access controls, data encryption, and multi-factor authentication
• Develop and maintain security procedures, guidelines and controls for network and endpoint systems
• Monitor IT infrastructure and landscape for potential security issues and respond to events
• Identify vulnerabilities by conducting assessments and penetration testing of our network and systems
• Collaborate with the IT team to identify and remediate security vulnerabilities and threats
• Write scripts to automate security operations tasks
• Conduct security assessments, working with third-party vendors, service providers, and internal initiatives to ensure they meet the organization's security requirements and standards
• Provide recommendations to the business regarding technical capabilities of new security products 
• Contribute to security-related communications including documentation for insitro, including policies, procedures, and guidelines

About You

• You are a highly motivated and curious security professional who is passionate about information security
• You establish trusting relationships with a high level of confidentiality across functions and levels
• You effectively communicate highly technical information to both technical and nontechnical staff 
• You demonstrate a growth mindset and are open to continuous learning and self-improvement in the ever-evolving field of security
• You are proactive in staying up to date with emerging security trends and industry best practices
• You have a problem-solving mindset and are driven to find creative solutions to complex security challenges
• You enjoy building things and making a contribution to developing a security program
• You have 5+ years of increasing responsibility in a similar role

Firm Understanding of

• Network security concepts and protocols (e.g. TCP/IP, DNS, VPN)
• Endpoint security technologies and tools (e.g. MDR, DLP, MDM)
• Security operations and incident response procedures and log analysis
• Security assessment methodologies and frameworks, such as NIST Cybersecurity Framework, ISO 27001, CIS Benchmarks

Nice to Have

• Relevant professional certifications (GIAC, C|EH,etc.)
• Experience with technical project management and agile methodologies
• Familiarity with HIPAA compliance standards 
• Experience with security automation and scripting languages (e.g. Python, Bash)

Compensation & Benefits at insitro