Director, Security Architecture and Engineering

Madrigal Pharmaceuticals•Conshohocken, PA

2d•$204,000 - $249,000

About The Position

Madrigal is a biopharmaceutical company focused on delivering novel therapeutics for metabolic dysfunction-associated steatohepatitis (MASH), a serious liver disease that can progress to cirrhosis, liver failure, need for liver transplantation and premature mortality. Every member of our Madrigal team is connected by our shared purpose: leading the fight against MASH. Madrigal’s medication, Rezdiffra (resmetirom), is a once-daily, oral, liver-directed THR-β agonist designed to target key underlying causes of MASH. Rezdiffra is the first and only medication approved by both the FDA and European Commission for the treatment of MASH with moderate to advanced fibrosis (F2 to F3). An ongoing Phase 3 outcomes trial is evaluating Rezdiffra for the treatment of compensated MASH cirrhosis (F4c). Our success is driven by our people. We are building a dynamic, inclusive, and high-performing culture that values scientific excellence, operational rigor, and collaboration. To support our continued growth, we are strengthening our workforce strategy to ensure we have the right talent, at the right time, in the right way. We are seeking a Director of Security Architecture & Engineering to lead secure cloud design (Azure primary, AWS secondary) and advance the maturity of our security engineering capabilities, including SIEM and enterprise telemetry. This is a player–coach leadership role within a lean security organization. The Director will shape secure-by-design cloud architecture while leading and evolving security engineering foundations that enable effective detection and response across the environment. The ideal candidate combines deep cloud security architecture expertise with strong hands-on security engineering experience and operational credibility.

Requirements

12+ years in cybersecurity with significant cloud security architecture experience.
Deep expertise in Azure security; working knowledge of AWS.
Experience designing and operating security controls embedded in CI/CD and Infrastructure as Code workflows.
Strong hands-on background in security engineering and enterprise SIEM/detection platforms (Microsoft Sentinel preferred).
Experience integrating IAM controls into cloud security architecture.
Comfortable operating in a lean environment requiring both strategic leadership and tactical engagement.
Proven ability to translate technical risk into business impact.

Responsibilities

Cloud Security Architecture Defines and evolves secure cloud architecture for Azure (primary) and AWS (secondary), establishing scalable security guardrails across identity, networking, encryption, and workload protection.
Establishes and enforces cloud security standards across Infrastructure as Code (IaC), CI/CD pipelines, and Secure SDLC practices, embedding secure-by-design principles into engineering workflows and deployment frameworks.
Leads cloud architecture reviews and threat modeling initiatives, partnering with engineering teams to ensure scalable, resilient, auditable, and compliant cloud deployments.
Security Engineering & Telemetry Owns the strategy and maturity roadmap for SIEM and enterprise telemetry, advancing detection coverage, signal quality, and measurable risk reduction.
Provides oversight of enterprise security tooling, including endpoint protection and cloud-native security platforms, ensuring cohesive integration and operational effectiveness.
Establishes cross-domain logging and telemetry standards across cloud, identity, endpoint, and enterprise systems, ensuring architectural decisions translate into effective monitoring and reduced analyst noise.
Identity Integration Ensures cloud security architecture aligns with enterprise IAM standards and governance.
Architects integration of privileged access, role-based access, and conditional access models within cloud environments.
Integrates identity telemetry into centralized monitoring workflows.
Operational Engagement Actively engages in security engineering and operational efforts as needed within a lean team.
Serves as technical escalation support during significant security events.
Continuously strengthens the connection between architecture, engineering, and operational security outcomes.
Risk & Leadership Impact Translates architectural and engineering decisions into measurable risk reduction.
Provides executive-level updates on cloud posture, security engineering maturity, and cyber risk trends.
Other duties as assigned

Benefits

All full-time employees receive equity, which reinforces our ownership culture and offers meaningful opportunity for our employees to share in the success they help create.
By aligning individual and company performance, we empower employees to think like owners, giving them a stake in the organization.
Full-time employees are also eligible for comprehensive benefits, including flexible paid time off, medical, dental, vision and life/disability insurance, and 401(k) offerings (i.e., traditional, Roth, and employer match) in accordance with applicable plans.
We also offer additional voluntary benefits like supplemental life insurance, legal services, and other offerings.
In addition, we offer mental health benefits through our Employee Assistance Program for employees and their family.
The company also provides other benefits in accordance with applicable federal, state, and local laws.

Stand Out From the Crowd

Upload your resume and get instant feedback on how well it matches this job.

Upload and Match Resume