Job description

ElevateBio is a technology-driven company powering the industry forward by helping partners realize the potential of their therapies from design to commercialization. We have integrated a differentiated set of technologies, end-to-end services, and industry-leading manufacturing expertise to develop advanced therapies faster and more efficiently. The Role Reporting to the VP, Head of Information Security, the Associate Director of Information Security Engineering & Operations is responsible for the design, implementation, operation, and continuous improvement of ElevateBio's security infrastructure across the full technology stack. This role requires both exceptional technical depth and broad operational scope, spanning endpoint protection, cloud security, identity threat protection, OT security, vulnerability management, incident response, and security automation. The ideal candidate is a hands-on engineer and operator who thrives in a fast-paced environment, can independently manage and evolve a complex security toolset, and is driven to automate and integrate wherever possible. This is a hybrid role based in Waltham, MA. Here’s What You’ll Do Automate and integrate AI into our security operations processes Design, implement, operate, and continuously improve information security tools, platforms, and architecture across the enterprise Operate, maintain, automate, and evolve endpoint detection and response (EDR) and managed detection and response (MDR) platforms, including oversight of third-party MDR partnerships Own, mature, and automate the vulnerability management program, ensuring timely identification, prioritization, and remediation of vulnerabilities Maintain, operate, automate, and evolve automated patching, identity threat protection, threat intelligence, cloud security, zero-trust network access (ZTNA), and OT security platforms Implement and mature a data security program Oversee and automate security monitoring, triage security incidents, and lead incident response efforts Develop and maintain security standards, hardening baselines, and configuration benchmarks Automate and integrate security tooling to maximize efficiency, coverage, and response speed Perform technology, architecture, and security reviews for new and existing systems Requirements Education & Experience Bachelor's degree in a relevant field or equivalent experience 5+ years of experience in information security Technical Skills Strong knowledge of endpoint security, EDR/MDR platforms, and vulnerability management Experience with cloud security tools and concepts (CSPM, SSPM, cloud-native security controls) Knowledge of zero-trust architecture and ZTNA implementations Experience with identity and access management and identity threat protection Familiarity with OT/ICS security concepts Strong understanding of TCP/IP networking, firewalls, VPNs, and network security Experience with Windows and Linux operating systems, including hardening Experience with scripting or automation (Python, PowerShell, or similar) Familiarity with threat intelligence platforms and practices Competencies & Behavioral Attributes Automation-first mindset — always looking for ways to improve efficiency and reduce manual effort Ability to work independently and manage multiple priorities across a broad scope Strong analytical and problem-solving skills Excellent communication and collaboration skills — able to translate technical concepts for non-technical audiences Ability to lead incident response under pressure Self-directed with a bias toward action Preferred Qualifications Familiarity with compliance frameworks (NIST CSF, CIS Controls, ISO 27001) Experience with security automation and orchestration (SOAR) platforms Experience with data security tools and programs CISSP, any GIAC, or CISM certifications Experience in a life sciences, biotech, or pharmaceutical environment The budgeted range for this position is $165,000 - $225,000. This range is a good faith estimate of the expected salary range for this position, based on a wide range of factors including qualifications, experience and training, operational and business needs and other considerations permitted by law. ElevateBio is committed to equal employment opportunity and non-discrimination for all employees and qualified applicants without regard to a person’s race, color, gender, age, religion, national origin, ancestry, disability, veteran status, genetic information, sexual orientation or any characteristic protected under applicable law. ElevateBio will make reasonable accommodations for qualified individuals with known disabilities, in accordance with applicable law.

Requirements

Must-haves

Here’s What You’ll Do
Automate and integrate AI into our security operations processes
Design, implement, operate, and continuously improve information security tools, platforms, and architecture across the enterprise
Operate, maintain, automate, and evolve endpoint detection and response (EDR) and managed detection and response (MDR) platforms, including oversight of third-party MDR partnerships
Own, mature, and automate the vulnerability management program, ensuring timely identification, prioritization, and remediation of vulnerabilities
Maintain, operate, automate, and evolve automated patching, identity threat protection, threat intelligence, cloud security, zero-trust network access (ZTNA), and OT security platforms
Implement and mature a data security program
Oversee and automate security monitoring, triage security incidents, and lead incident response efforts
Develop and maintain security standards, hardening baselines, and configuration benchmarks
Automate and integrate security tooling to maximize efficiency, coverage, and response speed
Perform technology, architecture, and security reviews for new and existing systems
Education & Experience
Bachelor's degree in a relevant field or equivalent experience
5+ years of experience in information security
Technical Skills
Strong knowledge of endpoint security, EDR/MDR platforms, and vulnerability management
Experience with cloud security tools and concepts (CSPM, SSPM, cloud-native security controls)
Knowledge of zero-trust architecture and ZTNA implementations
Experience with identity and access management and identity threat protection

Nice-to-haves

Familiarity with compliance frameworks (NIST CSF, CIS Controls, ISO 27001)
Experience with security automation and orchestration (SOAR) platforms
Experience with data security tools and programs
CISSP, any GIAC, or CISM certifications
Experience in a life sciences, biotech, or pharmaceutical environment

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aipython

Platform: greenhouse
Effort: quick