Security Engineer II
Iovancebiotherapeutics · Remote
About this role
**Security Engineer II — Iovance Biotherapeutics, Inc.** **About Iovance** Iovance Biotherapeutics, Inc. is the global leader in innovating, developing, and delivering tumor infiltrating lymphocyte (TIL) cell therapies for patients with solid tumors. Amtagvi® (lifileucel) is the first FDA-approved, one-time treatment for previously treated advanced melanoma, now approved in three global markets and available at more than 95 authorized treatment centers. --- ## Overview We are seeking a hands-on **Security Engineer** with strong technical depth across **endpoint, cloud, identity, and email security**. This role designs, deploys, and operates core security platforms, including **CrowdStrike Falcon EDR** and **Next-Gen SIEM**, **privileged access management**, **Mimecast**, **AWS security services**, and **GitHub security**. You will build policy, write detections and automation, troubleshoot across the stack, and document work in a validated, audit-ready environment. --- ## Essential Functions & Responsibilities ### Endpoint Detection, SIEM & Response (CrowdStrike) - Administer and tune CrowdStrike Falcon prevention policies, host groups, device control, and sensor updates across **Windows, macOS, and Linux**, with careful exclusion management for **GxP** and manufacturing systems. - Onboard and normalize log sources (**Okta, AWS, Mimecast, GitHub, PAM, servers**) into **Falcon Next-Gen SIEM**; build detections, dashboards, and **Falcon Fusion SOAR** workflows. - Investigate alerts, conduct threat hunting, and drive containment and remediation. ### Privileged Access Management (PAM) - Operate the enterprise PAM platform, including vaulting, credential rotation, session recording, and just-in-time access for servers, cloud accounts, databases, and service accounts. - Integrate PAM with **Okta** and **Active Directory**; support privileged access reviews and segregation-of-duties controls. ### Email Security (Mimecast) - Administer Mimecast targeted threat protection, DLP, archiving, and continuity policies; maintain **SPF, DKIM, and DMARC**. - Investigate phishing, impersonation, and business email compromise attempts. ### Cloud & DevSecOps Security (AWS, Microsoft 365, GitHub) - Secure **AWS** workloads including **EC2, ECS, ELB/ALB, S3, and VPC networking** using **AWS WAF, IAM, KMS, GuardDuty, Security Hub, Config, and CloudTrail**. - Identify and remediate misconfigurations, enforce least privilege, and review **infrastructure-as-code** (Terraform/CloudFormation). - Harden and monitor **Microsoft 365**, including **Entra ID Conditional Access**, Exchange Online, SharePoint/OneDrive/Teams sharing controls, **Microsoft Purview DLP** and sensitivity labels, and Secure Score recommendations. - Administer **GitHub Advanced Security** (code scanning, secret scanning, Dependabot), branch protection, and organization policies; secure **GitHub Actions** pipelines using **OIDC federation to AWS**. ### Governance, Compliance & Operations - Author technical documentation, standards, and runbooks suitable for **GxP, SOX, and HIPAA** audits; provide audit evidence. - Participate in change control, vulnerability and patch management, incident response, and on-call rotation. --- ## Required Education, Skills, & Knowledge - Bachelor’s degree in Computer Science, Information Security, or related field, **or equivalent experience**. - **5+ years** hands-on experience in security engineering or cloud security. - Hands-on experience with **Crowd
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.