Sr Security Engineer

Inotiv•West Lafayette, IN

10h

About The Position

The Senior Security Engineer is a senior individual contributor on Inotiv’s Information Security team. The role works across the organization’s security tooling to support detection, incident response, cloud security, and vulnerability management in a global hybrid environment spanning cloud and on-premises systems. The engineer builds and tunes detections, hunts for threats, supports incident response, and helps deploy, maintain, and optimize security tools and controls that protect company and client data. The role also contributes to cloud security and vulnerability management and provides technical security support for audits and vendor reviews. Reporting to the Vice President, Infrastructure & Information Security, this hands-on technical contributor participates in the on-call response rotation within a global drug discovery and development organization. The position may be offered at different levels based on a candidate’s combination of education and experience, with salary adjusted accordingly.

Requirements

Bachelor’s degree in Information Security, Computer Science, Information Systems, or a related field, or equivalent experience.
5 to 8 years of experience in security engineering, security operations, incident response, and/or vulnerability management.
Advanced knowledge of EDR, cloud security (Azure, AWS, and Microsoft 365), vulnerability management, incident response, and the MITRE ATT&CK framework.
Experience deploying and maintaining security tooling across a hybrid cloud and on-premises environment.
Working knowledge of business-related processes, procedures, terminology, and compliance.
Analytical thinking skills, including the ability to understand problems, determine root cause, and recommend appropriate solutions.
Excellent verbal and written communication skills, including the ability to explain complex concepts concisely and clearly.
Ability to prioritize and handle multiple projects, often under tight time constraints.
Ability to work effectively and collaboratively with peers, leadership, and stakeholders.
Ability to comply with confidentiality and privacy rules and protect company property and confidential information.

Nice To Haves

2 or more years of experience in a regulated life sciences environment or a large or complex enterprise.
Certifications such as GCIH, GCIA, GCFA, GREM, OSCP, CISSP, or a cloud security certification such as AZ-500 or AWS Security.
Experience with EDR, cloud security posture management (CSPM), and vulnerability management platforms.
Scripting and automation experience, such as Python, PowerShell, or KQL.
Relevant work experience.

Responsibilities

Build, tune, and maintain security detections and monitoring across EDR, endpoint, email, cloud, and network telemetry, mapping detections to the MITRE ATT&CK framework using available analytics and log sources.
Support end-to-end security incident response, including detection, triage, investigation, containment, eradication, recovery, and post-incident review.
Conduct proactive threat hunting and forensic and root-cause analysis, and participate in the on-call response rotation.
Deploy, configure, maintain, and optimize existing and new security tools, and monitor their health and performance.
Contribute to cloud security across Azure, AWS, and Microsoft 365, including posture management, secure configuration and hardening, monitoring, and remediation.
Support vulnerability scanning, risk-based prioritization, and remediation across endpoints, servers, applications, and cloud, with clear reporting and metrics.
Administer and improve security controls and system hardening, including Windows server and workstation security.
Partner with IT and infrastructure teams on remediation and security architecture.
Provide technical information security support for audits, risk assessments, and third-party and vendor security reviews in partnership with the GRC team.
Collaborate with teammates to share knowledge and improve processes.
Perform other special projects and duties as assigned.