Associate Director, Information Security Engineering & Operations
ElevateBio
Summary
Reporting to the VP, Head of Information Security, the Associate Director of Information Security Engineering & Operations is responsible for the design, implementation, operation, and continuous improvement of ElevateBio's security infrastructure across the full technology stack. This role requires both exceptional technical depth and broad operational scope, spanning endpoint protection, cloud security, identity threat protection, OT security, vulnerability management, incident response, and security automation. The ideal candidate is a hands-on engineer and operator who thrives in a fast-paced environment, can independently manage and evolve a complex security toolset, and is driven to automate and integrate wherever possible. This is a hybrid role based in Waltham, MA.
Job description
Here's What You'll Do
- Automate and integrate AI into our security operations processes
- Design, implement, operate, and continuously improve information security tools, platforms, and architecture across the enterprise
- Operate, maintain, automate, and evolve endpoint detection and response (EDR) and managed detection and response (MDR) platforms, including oversight of third-party MDR partnerships
- Own, mature, and automate the vulnerability management program, ensuring timely identification, prioritization, and remediation of vulnerabilities
- Maintain, operate, automate, and evolve automated patching, identity threat protection, threat intelligence, cloud security, zero-trust network access (ZTNA), and OT security platforms
- Implement and mature a data security program
- Oversee and automate security monitoring, triage security incidents, and lead incident response efforts
- Develop and maintain security standards, hardening baselines, and configuration benchmarks
- Automate and integrate security tooling to maximize efficiency, coverage, and response speed
- Perform technology, architecture, and security reviews for new and existing systems
Requirements
Education & Experience
- Bachelor's degree in a relevant field or equivalent experience
- 5+ years of experience in information security
Technical Skills
- Strong knowledge of endpoint security, EDR/MDR platforms, and vulnerability management
- Experience with cloud security tools and concepts (CSPM, SSPM, cloud-native security controls)
- Knowledge of zero-trust architecture and ZTNA implementations
- Experience with identity and access management and identity threat protection
- Familiarity with OT/ICS security concepts
- Strong understanding of TCP/IP networking, firewalls, VPNs, and network security
- Experience with Windows and Linux operating systems, including hardening
- Experience with scripting or automation (Python, PowerShell, or similar)
- Familiarity with threat intelligence platforms and practices
Competencies & Behavioral Attributes
- Automation-first mindset — always looking for ways to improve efficiency and reduce manual effort
- Ability to work independently and manage multiple priorities across a broad scope
- Strong analytical and problem-solving skills
- Excellent communication and collaboration skills — able to translate technical concepts for non-technical audiences
- Ability to lead incident response under pressure
- Self-directed with a bias toward action
Preferred Qualifications
- Familiarity with compliance frameworks (NIST CSF, CIS Controls, ISO 27001)
- Experience with security automation and orchestration (SOAR) platforms
- Experience with data security tools and programs
- CISSP, any GIAC, or CISM certifications
- Experience in a life sciences, biotech, or pharmaceutical environment
Requirements
- Bachelor's degree in a relevant field or equivalent experience
- 5+ years of experience in information security
- Strong knowledge of endpoint security, EDR/MDR platforms, and vulnerability management
- Experience with cloud security tools and concepts (CSPM, SSPM, cloud-native security controls)
- Knowledge of zero-trust architecture and ZTNA implementations
- Experience with identity and access management and identity threat protection
- Familiarity with OT/ICS security concepts
- Strong understanding of TCP/IP networking, firewalls, VPNs, and network security
- Experience with Windows and Linux operating systems, including hardening
- Experience with scripting or automation (Python, PowerShell, or similar)
- Familiarity with threat intelligence platforms and practices
- Automation-first mindset
- Ability to work independently and manage multiple priorities across a broad scope
- Strong analytical and problem-solving skills
- Excellent communication and collaboration skills
- Ability to lead incident response under pressure
- Self-directed with a bias toward action
Company overview
ElevateBio is a pioneering biotechnology company established in 2018 that has developed a comprehensive ecosystem to accelerate the discovery and development of advanced cell and gene therapies. The company operates as a technology-driven platform built to power transformative genetic medicines through its integrated approach combining Life Edit, its gene editing technologies and R&D business, with BaseCamp®, its end-to-end genetic medicine process development and cGMP manufacturing business. With headquarters in Cambridge, Massachusetts and operations in Waltham, ElevateBio has raised over $1.25 billion in funding across multiple rounds, including a $401 million Series D in 2023. The company employs 201-500 professionals and has achieved a remarkable 98% manufacturing batch success rate across cell therapy, viral vector, and mRNA production. ElevateBio's mission is to serve as the dominant engine inside the world's greatest scientific advancements, harnessing human cells and genes to alter disease trajectories and provide partners with access to enabling technologies, manufacturing capabilities, and industry-leading expertise to accelerate development across various therapeutic approaches and modalities.