Security Engineer II

Responsibilities

• Administer and tune CrowdStrike Falcon prevention policies and sensor updates across Windows, macOS and Linux
• Onboard log sources into Falcon Next-Gen SIEM and build detections, dashboards and SOAR workflows
• Investigate alerts, conduct threat hunting and drive containment and remediation
• Operate the enterprise PAM platform including vaulting, credential rotation and just-in-time access
• Administer Mimecast policies and investigate phishing and business email compromise
• Secure AWS workloads and Microsoft 365, and administer GitHub Advanced Security
• Author audit-ready documentation for GxP, SOX and HIPAA audits

Requirements

• Bachelor's degree in Computer Science, Information Security or related field, or equivalent experience
• 5+ years of security engineering or cloud security experience
• Hands-on CrowdStrike Falcon EDR and SIEM experience with detection development
• Enterprise PAM administration experience
• Practical AWS security and Microsoft 365 security experience
• Scripting in Python, PowerShell or Bash
• Strong written communication and audit-ready documentation skills

Preferred Qualifications

• Regulated life sciences or healthcare environment experience (GxP, 21 CFR Part 11, HIPAA, SOX)
• Okta and Microsoft Entra ID/Intune experience
• Familiarity with Terraform, NIST CSF, NIST 800-53 and CIS Controls
• CrowdStrike, AWS Security Specialty, CISSP or GIAC certifications

About the Company

Iovance Biotherapeutics is the global leader in tumor infiltrating lymphocyte (TIL) cell therapies for solid tumors, with fully owned U.S.-based manufacturing.