Sr Security Engineer

Inotiv•West Lafayette, IN

2d•Hybrid

About The Position

The Senior Security Engineer is a senior individual contributor on Inotiv’s Information Security team, working across the organization’s security tool stack to support the company’s detection, incident response, cloud security, and vulnerability management capabilities across a global, hybrid (cloud and on-premises) environment. As part of the team, this role builds and tunes detections, hunts for threats, and supports incident response to rapidly detect, contain, and remediate threats, and helps deploy, maintain, and optimize the security tools and controls that protect company and client data. The role also contributes to cloud security and the vulnerability management program and provides technical security support for audits and vendor reviews. Reporting to the Vice President, Infrastructure & Information Security, the Senior Security Engineer is a hands-on technical contributor who participates in the on-call response rotation within a global drug discovery and development organization.

Requirements

Bachelor’s degree in Information Security, Computer Science, Information Systems, or a related field (or equivalent experience).
5 to 8 years of experience in security engineering, security operations, incident response, and/or vulnerability management.
Advanced knowledge of endpoint detection and response (EDR), cloud security (Azure/AWS/Microsoft 365), vulnerability management, incident response, and the MITRE ATT&CK framework, including deploying and maintaining security tooling across a hybrid (cloud and on-premises) environment.
Working knowledge of business-related processes, procedures, terminology, and compliance.
Analytical thinker with the ability to understand problems, determine root cause, and recommend appropriate solutions.
Excellent verbal and written communication skills, able to relate complex concepts in a concise and easy-to-understand manner.
Ability to prioritize and handle multiple projects, often under tight time constraints.
Ability to work effectively with peers, leadership, and stakeholders in a productive, collaborative environment.
Ability to understand and comply with confidentiality and privacy rules and protect company property and confidential information.

Nice To Haves

2+ years of experience in a regulated life sciences environment or a large/complex enterprise.
Certifications preferred: GCIH, GCIA, GCFA, GREM, OSCP, CISSP, or a cloud security certification (e.g., AZ-500, AWS Security).
Experience with EDR, cloud security posture management (CSPM), and vulnerability management platforms.
Scripting and automation experience (e.g., Python, PowerShell, KQL).
Preference given to relevant work experience.

Responsibilities

Build, tune, and maintain security detections and monitoring across the organization’s security tooling – EDR, endpoint, email, cloud, and network telemetry – mapping detections to the MITRE ATT&CK framework using native tool analytics and available log sources.
Support security incident response end-to-end – detection, triage, investigation, containment, eradication, recovery, and post-incident review – perform proactive threat hunting and forensic/root-cause analysis, and participate in the on-call response rotation.
Deploy, configure, maintain, and optimize existing and new security tools across the environment, and monitor their ongoing health and performance.
Contribute to cloud security across Azure, AWS, and Microsoft 365 – security posture management, secure configuration and hardening, monitoring, and remediation.
Support the vulnerability management program – scanning, risk-based prioritization, and remediation across endpoints, servers, applications, and cloud – with clear reporting and metrics.
Administer and improve security controls and system hardening (including Windows server and workstation security), and partner with IT and infrastructure teams on remediation and security architecture.
Provide technical information security support for audits, risk assessments, and third-party/vendor security reviews in partnership with the GRC team, and collaborate with teammates to share knowledge and improve processes.
Other special projects and duties as assigned