Associate Director, Information Security Engineering & Operations
About The Position
ElevateBio is a technology-driven company that helps partners advance therapies from design to commercialization through integrated technologies, end-to-end services, and manufacturing expertise. The Associate Director of Information Security Engineering & Operations reports to the VP, Head of Information Security and is responsible for designing, implementing, operating, and continuously improving the company’s security infrastructure across its technology stack. The role spans endpoint protection, cloud security, identity threat protection, OT security, vulnerability management, incident response, and security automation. It is a hands-on engineering and operations role requiring technical depth, independent ownership of a complex security toolset, and an automation-focused approach. The position is hybrid and based in Waltham, Massachusetts.
Requirements
- Bachelor’s degree in a relevant field or equivalent experience.
- At least 5 years of experience in information security.
- Strong knowledge of endpoint security, EDR/MDR platforms, and vulnerability management.
- Experience with cloud security tools and concepts, including CSPM, SSPM, and cloud-native security controls.
- Knowledge of zero-trust architecture and ZTNA implementations.
- Experience with identity and access management and identity threat protection.
- Familiarity with OT/ICS security concepts.
- Strong understanding of TCP/IP networking, firewalls, VPNs, and network security.
- Experience with Windows and Linux operating systems, including hardening.
- Experience with scripting or automation using Python, PowerShell, or similar.
- Familiarity with threat intelligence platforms and practices.
- Automation-first mindset and ability to improve efficiency and reduce manual effort.
- Ability to work independently and manage multiple priorities across a broad scope.
- Strong analytical and problem-solving skills.
- Excellent communication and collaboration skills, including the ability to explain technical concepts to non-technical audiences.
- Ability to lead incident response under pressure.
- Self-directed, with a bias toward action.
Nice To Haves
- Familiarity with compliance frameworks such as NIST CSF, CIS Controls, and ISO 27001.
- Experience with security automation and orchestration (SOAR) platforms.
- Experience with data security tools and programs.
- CISSP, GIAC, or CISM certification.
- Experience in a life sciences, biotech, or pharmaceutical environment.
Responsibilities
- Automate and integrate AI into security operations processes.
- Design, implement, operate, and continuously improve enterprise information security tools, platforms, and architecture.
- Operate, maintain, automate, and evolve EDR and MDR platforms, including oversight of third-party MDR partnerships.
- Own, mature, and automate the vulnerability management program, ensuring timely identification, prioritization, and remediation of vulnerabilities.
- Maintain, operate, automate, and evolve automated patching, identity threat protection, threat intelligence, cloud security, ZTNA, and OT security platforms.
- Implement and mature a data security program.
- Oversee and automate security monitoring, triage security incidents, and lead incident response efforts.
- Develop and maintain security standards, hardening baselines, and configuration benchmarks.
- Automate and integrate security tooling to improve efficiency, coverage, and response speed.
- Perform technology, architecture, and security reviews for new and existing systems.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Director
