Security engineer in corporate systems

Isomorphic Labs; Greater London; Híbrido; GBP 90.000 - 130.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Hybrid work model

Office 3 days/week

Descripción de la vacante

Isomorphic Labs ищет специалиста по корпоративной безопасности и IAM, который будет проектировать и поддерживать структуры IAM, управлять жизненным циклом пользователей и усиливать защиту SaaS-платформ. Ваша роль включает аудит систем, сотрудничество с инженерами и развитие политик безопасности в среде Google Workspace, Jira и Slack.

Требуется опыт работы с DLP, SSPM и аудитом поставщиков, умение автоматизировать процессы и работать с данными в условиях быстрого роста.

Formación

• Опыт работы с корпоративными системами IAM, SSO и управлением жизненным циклом пользователей.
• Опыт работы со стеками Atlassian и Google (Workspace, Confluence, Jira).
• Умение переводить бизнес-требования в политики и SOP.
• Опыт настройки DLP и политик классификации данных.
• Навыки работы с инструментами SaaS-безопасности (AppOmni, Adaptive Shield).
• Опыт аудита поставщиков и безопасности инцидентов.
• Сильная склонность к автоматизации и применению ИИ в рабочих процессах.
• Коммуникабельность для взаимодействия с техническими и нетехническими стейкхолдерами.
• Плюсом: опыт в BioTech/ML-компаниях, знание OWASP Top 10 для LLMs.

Responsabilidades

• Разработка и поддержка IAM-структур корпорации, включая груповые архитектуры и интеграцию систем.
• Аудит корпоративных систем, развёртывание инструментов мониторинга, DLP и анализа логов.
• Сотрудничество с Corp Engineering для повышения data governance и безопасности в Google Workspace, Confluence, Jira, Slack.
• Сопровождение инцидентов и triage совместно с Detection & Response инженерами.
• Развитие правил безопасности и обучение сотрудников.
• Контроль физической защиты и инфраструктуры (бейджи, офисное оборудование).
• Внедрение процессов по onboarding/offboarding и интеграциям инструментов.
• Проведение аудита поставщиков и SSPM, работа с внешними рисками.
• Автоматизация рутинных задач с использованием AI-агентов.

Conocimientos

IAM

SSO

User lifecycle

Directory structures

SaaS security

DLP

Data governance

Security incident response

Automation

AI tooling

Herramientas

Google Workspace

Confluence

Jira

Okta

AppOmni

Adaptive Shield

SaaS log analysis

Descripción del empleo

Описание

Isomorphic Labs is applying frontier AI to help unlock deeper scientific insights, faster breakthroughs, and life-changing medicines with an ambition to solve all disease. The future is coming. A future enabled and enriched by the incredible power of machine learning. A future in which diseases are curtailed or cured starting with better and faster drug discovery.

Задачи

Design, optimize, and support corporate IAM structures, including group architectures, identity system integration, and streamlined employee onboarding/offboarding workflows. Audit corporate systems security and deploy/maintain a wide range of security tools (e.g., logging, monitoring & DLP, data labeling, AI agents). Collaborating with Corp Engineering, enhance data governance and security within corporate systems (Google Workspace, Confluence, Jira, Slack, etc.) by gathering user needs and co-developing scalable operating models, appropriate configurations, and SOPs. Partner closely with Detection & Response security engineers to improve and triage corporate security alerts, support incident response efforts when issues arise and address Google’ vulnerabilities and bugs. Promote corporate security rules, support security awareness training and run social engineering exercises. Collaborate with Workplace and Tech teams to ensure the security of physical systems (badges, lab workstations) and offices. Translate key user needs and security compliance requirements into clear operational processes—such as establishing workflows for onboarding new tools, setting up data transfers and external system integrations. Execute standardized vendor and software audits, improve SaaS Security Posture Management (SSPM) through tools, and address third-party integrations and supply-chain safety risks. Leverage AI tools and agentic workflows to automate routine security tasks, optimize triage, and streamline operations. Act as a positive, proactive point of contact for internal teams, delivering user-oriented security solutions that reduce friction while upholding high security standards.

Требования

Fluency in navigating complex multi-org corporate systems’ workflows and processes. Experience with Atlassian’s and/or Google’s tech stacks. Proficiency in collecting user needs and business requirements, turning high-level guidance into efficient SOPs, policies, and guidelines documents. Strong foundation in Corporate Systems Security and IAM, including hands‑on experience with SSO, user lifecycle management, and directory/group structures. Proficiency in basic Python, Go, or PowerShell to interface with REST APIs across SaaS ecosystems (Slack, Google Workspace, Okta). Knowledge of SaaS Security Posture Management (SSPM), and ideally, experience using tools like AppOmni, Adaptive Shield, or native SaaS log analysis to spot misconfigurations. Experience implementing Data Loss Prevention (DLP) corporate controls, data classification/labeling, and corporate data governance frameworks. Practical experience establishing or executing standardized vendor technical security assessments. Background in supporting security incident response and handling daily security alert triage. A strong bias for automation and an eagerness to leverage AI tools or agentic scanning mechanisms within corporate security workflows. Proactive, positive, and highly user-oriented mindset with exceptional communication skills to collaborate with technical and non-technical stakeholders alike. Будет плюсом: Experience in high-growth tech environments, BioTech, ML-centric companies, or the pharmaceutical industry; Familiarity with OWASP Top 10 for LLMs, prompt injection prevention, and secure integration of internal AI assistants; Hands‑on experience building or integrating AI-driven automation, agentic workflows, or custom scripts for security operations; Understanding of security patterns for Electronic Lab Notebooks (ELNs), Laboratory Information Management Systems (LIMS), or High‑Performance Computing (HPC) environments; Familiarity with GitHub Enterprise security settings, secret scanning, and developer environment hardening; Familiarity with common data protection regulations and security frameworks (e.g., GDPR, ISO 27001); Relevant industry certifications (e.g., Security+, CISSP, CISA, GSEC)

Условия

This is why we follow a hybrid model, and would require you to be able to come into the office 3 days a week (currently Tuesday, Wednesday, and one other day depending on which team you’re in).