Security Engineer

About the Client

Our client is the leading research data platform that’s transforming the way biomedical and imaging data are managed at leading life sciences, clinical, and academic institutions globally.

The client provides a comprehensive research data solution with all the tools needed for curation, imaging processing, machine learning workflows, and secure collaboration. By leveraging cloud scalability and automating research workflows, they help organizations scale research data and analysis, improve scientific collaboration, and accelerate discoveries.

Role Overview

We are seeking a Security Engineer to help build and operate the client`s application and cloud security programs. You’ll work hands-on across DevSecOps security tooling, cloud and Kubernetes security, and SIEM operations — partnering with development teams and our SOC to raise the security bar without slowing teams down.

Requirements:

• DevSecOps tool integrations in GitLab CI or similar, with working knowledge of Python/Bash
• Vulnerability management: scanning, triage, remediation tracking, and risk reporting
• Hands-on SIEM experience (Azure Sentinel or similar) — log ingestion and analysis
• Secure code review: identifying vulnerabilities and insecure patterns, providing actionable remediation guidance
• Hands-on CNAPP/CSPM experience (e.g., Wiz) — findings triage and remediation tracking
• Familiarity with AWS, Azure, Terraform, Kubernetes, Helm

Preferred Skills:

• Incident response: detection, investigation, containment, post-incident review
• Security architecture and threat modeling for Kubernetes apps on AWS/Azure
• Securing AI workloads; using AI to accelerate defensive workflows
• Compliance frameworks: SOC 2, ISO 27001, HIPAA, NIST 800-53
• English level: Upper intermediate

Responsibilities:

• Configure and maintain SAST, vulnerability, and container scanning in GitLab CI. Partner with developers on vulnerability analysis, secure code review, and remediation.
• Deploy and maintain security tooling across AWS, Azure, Kubernetes, and Linux VMs; monitor cloud security posture and drive remediation of misconfigurations.
• Configure and maintain log integrations with Azure Sentinel SIEM. Collaborate with the SOC on incident detection and response.
• Drive vulnerability scanning, triage, and remediation tracking across infrastructure and applications, with reporting for the vulnerability management program.