Cyber Security Engineer (all genders)

Evotec

14h•Hybrid

About The Position

Evotec’s Cyber Security team is seeking a highly motivated and dedicated Cyber Security Engineer. This is a full-time and permanent role available across Evotec’s EU locations in the UK, France, Germany, and Italy. The role can be performed fully flexible on-site, in a hybrid model, or remotely. Evotec is a life science company with a unique business model that delivers on its mission to discover and develop highly effective therapeutics and make them available to the patients. The Company’s multimodality platform comprises a unique combination of innovative technologies, data and science for the discovery, development, and production of first-in-class and best-in-class pharmaceutical products. Evotec leverages this “Data-driven R&D Autobahn to Cures” for proprietary projects and within a network of partners including all Top 20 Pharma and over 800 biotechnology companies, academic institutions, as well as other healthcare stakeholders. Evotec has strategic activities in a broad range of currently underserved therapeutic areas, including e.g. neurology, oncology, as well as metabolic and infectious diseases. Within these areas of expertise, Evotec aims to create the world-leading co-owned pipeline for innovative therapeutics and has to-date established a portfolio of more than 200 proprietary and co-owned R&D projects from early discovery to clinical development. Evotec operates globally with more than 5,000 highly qualified people. The Company’s 17 sites offer highly synergistic technologies and services and operate as complementary clusters of excellence.

Requirements

University degree in computer science, information technology, or a related field, or an equivalent qualification
Sound professional working experience in security engineering roles, with proven expertise in multiple security domains such as, for example, application security, security operations, vulnerability management
Professional software development and automation experience with at least one programming language and a solid understanding of software engineering principles and best practices such as version control, peer reviews, CI/CD
Strong understanding of security principles related to open-source software with experience in identifying and mitigating vulnerabilities in open-source components, contributions to relevant open-source projects is a plus
Strong knowledge of technologies, protocols and systems, security controls, cybersecurity tools, and best practices in at least three technology areas such as cloud, network, endpoint, mobile devices, operating system, containerization
Strong problem-solving skills and the ability to analyze complex security issues
Team player with great communication skills and practiced in stakeholder management
Good written and verbal communication skills in English

Nice To Haves

Familiarity with cyber security standards and frameworks such as ISO27001, NIST CSF, SOC2, or similar is a plus
Proficiency in German, French or Italian is a plus

Responsibilities

Design, implement, and maintain security controls and solutions across various technological domains, including network security, cloud security, application security, endpoint security, and backup systems
Plan, implement, and maintain cybersecurity tools, such as XDR, SIEM, IOC scanner, vulnerability scanner, EASM, or network traffic analysis tools
Collaborate with the team’s security architects and the SOC to ensure that implementations align with the security architecture and guidelines
Conduct security assessments, vulnerability scans, and penetration tests to identify and mitigate potential risks or vulnerabilities
Support the SOC and participate in incident detection and response activities, including investigating security event data, alerts, and incidents, conducting forensic analysis, and implementing remediation actions
Work with cross-functional teams and IT stakeholders to integrate security requirements and controls into technology solutions and projects
Develop and maintain system documentation, technical guidelines, standards, and procedures for IT teams
Stay updated on the latest security trends, technologies, and best practices, as well as security threats