Associate Director, Information Security Engineering & Operations
About The Position
The Associate Director of Information Security Engineering & Operations is responsible for designing, implementing, operating, and continuously improving ElevateBio’s security infrastructure across the full technology stack. Reporting to the VP, Head of Information Security, this hands-on role spans endpoint protection, cloud security, identity threat protection, OT security, vulnerability management, incident response, and security automation. The role is hybrid and based in Waltham, Massachusetts. The ideal candidate brings deep technical expertise and broad operational capability, can independently manage and evolve a complex security toolset, and prioritizes automation and integration. The role also includes applying AI to security operations and developing and maturing security programs and standards.
Requirements
- Bachelor’s degree in a relevant field or equivalent experience.
- At least 5 years of experience in information security.
- Strong knowledge of endpoint security, EDR/MDR platforms, and vulnerability management.
- Experience with cloud security tools and concepts, including CSPM, SSPM, and cloud-native security controls.
- Knowledge of zero-trust architecture and ZTNA implementations.
- Experience with identity and access management and identity threat protection.
- Familiarity with OT/ICS security concepts.
- Strong understanding of TCP/IP networking, firewalls, VPNs, and network security.
- Experience with Windows and Linux operating systems, including hardening.
- Experience with scripting or automation using Python, PowerShell, or similar tools.
- Familiarity with threat intelligence platforms and practices.
- Automation-first mindset, with an emphasis on improving efficiency and reducing manual effort.
- Ability to work independently and manage multiple priorities across a broad scope.
- Strong analytical and problem-solving skills.
- Excellent communication and collaboration skills, including the ability to explain technical concepts to non-technical audiences.
- Ability to lead incident response under pressure.
- Self-directed approach and bias toward action.
Nice To Haves
- Familiarity with NIST CSF, CIS Controls, or ISO 27001 compliance frameworks.
- Experience with security automation and orchestration (SOAR) platforms.
- Experience with data security tools and programs.
- CISSP, any GIAC, or CISM certification.
- Experience in a life sciences, biotech, or pharmaceutical environment.
Responsibilities
- Automate and integrate AI into security operations processes.
- Design, implement, operate, and continuously improve enterprise information security tools, platforms, and architecture.
- Operate, maintain, automate, and evolve EDR and MDR platforms, including oversight of third-party MDR partnerships.
- Own, mature, and automate the vulnerability management program to support timely identification, prioritization, and remediation of vulnerabilities.
- Maintain, operate, automate, and evolve automated patching, identity threat protection, threat intelligence, cloud security, ZTNA, and OT security platforms.
- Implement and mature a data security program.
- Oversee and automate security monitoring, triage security incidents, and lead incident response efforts.
- Develop and maintain security standards, hardening baselines, and configuration benchmarks.
- Automate and integrate security tooling to improve efficiency, coverage, and response speed.
- Perform technology, architecture, and security reviews for new and existing systems.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
