Cybersecurity Principal Engineer (Palo Alto) - HYBRID ROLE

Vertex Pharmaceuticals Incorporated

Boston (MA)

On-site

USD 147,600 - 221,400

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Benefits offered by this job

Competitive compensation and incentive

Medical, dental, vision coverage

Retirement savings programs

Paid time off and holidays

Wellness and employee assistance

Professional development

Inclusive culture

Job summary

Vertex Pharmaceuticals Incorporated is seeking a Principal Cybersecurity Engineer to lead the design, implementation, and continuous improvement of foundational security platforms across network, cloud, AI, SaaS, and hybrid environments.

You will partner with security, infrastructure, cloud, and application teams to strengthen architecture, improve automation, and enable secure modernization while balancing innovation and compliance.

Qualifications

Bachelor's degree in Information Security, Computer Science, Information Technology, Engineering, or related field; advanced degree preferred.
10+ years of experience in cybersecurity, security engineering, infrastructure security, or related roles.
Proven design, implementation, and operation of enterprise-scale security architecture and platforms.
Deep expertise across network, cloud, application, SaaS, and hybrid security.
Experience with modern enterprise security controls, standards, and roadmaps.

Responsibilities

Lead design and optimization of core security platforms across network, cloud, and hybrid environments.
Serve as senior technical expert for foundational security controls and governance.
Develop and mature Zero Trust capabilities and access controls.
Design and support security infrastructure technologies (firewalls, IPS, WAF, NAC).
Drive secure-by-design and secure-by-default principles across all tech areas.
Mentor engineers and drive cross-functional security initiatives.

Skills

Zero Trust

Palo Alto

Security architecture

Cross-functional leadership

Cloud security

AI security

Regulatory compliance

Mentoring engineers

Education

Bachelor's degree in Information Security/CS/IT

Advanced degree preferred

Tools

Palo Alto Networks

Illumio

Obsidian

Armis

Job description

Job Description

Company Overview

Vertex Pharmaceuticals is a global biotechnology company that invests in scientific innovation to create transformative medicines for people with serious diseases. We are committed to improving the lives of patients through bold science, advanced technology, and a collaborative, mission-driven culture. At Vertex, employees are empowered to solve complex challenges in an environment that values innovation, integrity, and excellence.

Position Summary

The Principal Cybersecurity Engineer, Core Security Infrastructure is a technical leader responsible for shaping and advancing Vertex's core security capabilities across network, cloud, application, AI, SaaS, and hybrid environments.

This role serves as a deeply technical engineering leader focused on the design, implementation, hardening, and continuous improvement of foundational security platforms and controls that protect the enterprise while enabling innovation, scalability, resilience, and compliance. The successful candidate will bring strong hands-on expertise, architectural depth, and the ability to lead complex security engineering initiatives across a modern enterprise environment.

The Principal Cybersecurity Engineer will partner closely with cybersecurity, infrastructure, cloud, application, and enterprise technology teams to strengthen security architecture, improve platform effectiveness, enhance automation, and support secure modernization efforts. This role is ideal for a highly experienced engineer who can influence strategy through technical excellence, drive implementation of modern security capabilities, and serve as a trusted expert across core security domains.

Work Model: On-site or Hybrid

(Remote work is NOT an option)

Key Responsibilities

Lead the design, engineering, implementation, and optimization of enterprise core security platforms across network, cloud, application, AI, SaaS, and hybrid environments.
Serve as a senior technical expert for foundational security controls, ensuring scalability, resilience, operational effectiveness, and alignment with enterprise security strategy.
Engineer and enhance Zero Trust capabilities through identity-based access, segmentation, secure access controls, and continuous verification models.
Design, implement, and support enterprise security infrastructure technologies, including firewalls, intrusion prevention, network access control, web application firewall capabilities, and policy enforcement platforms.
Drive secure-by-design and secure-by-default principles across infrastructure, application, cloud, SaaS, and AI technology environments.
Develop and maintain security standards, engineering patterns, reference architectures, guardrails, and technical implementation guidance.
Improve enterprise visibility through security monitoring, telemetry, governance, and policy enforcement across infrastructure and platform layers.
Design and implement security controls and validation approaches for AI and generative AI technologies in partnership with architecture and governance stakeholders.
Lead complex technical initiatives to modernize and automate security platforms, improve operational consistency, and reduce manual effort.
Partner with cross-functional technology teams to embed security into platform design, engineering workflows, and operational processes.
Evaluate current security capabilities and recommend technical improvements to reduce risk, improve resilience, and strengthen enterprise defenses.
Provide technical leadership during platform assessments, architecture reviews, risk remediation, and major engineering decisions.
Support vendor evaluations, technology selections, and implementation activities related to strategic security platform investments.
Mentor engineers and contribute to a culture of technical excellence, accountability, innovation, and continuous improvement.

Required Qualifications

Bachelor's degree in Information Security, Computer Science, Information Technology, Engineering, or a related field; advanced degree preferred.
10+ years of experience in cybersecurity, security engineering, infrastructure security, or related technical roles.
Demonstrated success designing, implementing, and operating enterprise-scale security architecture, engineering, infrastructure, or platform security capabilities.
Deep technical expertise across network, cloud, application, SaaS, and hybrid infrastructure security.
Strong experience building and engineering modern enterprise security controls and platforms.
Deep understanding of Zero Trust principles and modern enterprise security architectures.
Experience designing, implementing, and operating Palo Alto Networks security platforms in large, complex enterprise environments.
Experience with SaaS security, asset visibility, and cloud security posture management solutions across AWS and Azure environments.
Experience with network access control, web application firewall technologies, and segmentation capabilities in enterprise environments.
Experience developing security standards, engineering guardrails, and technical roadmaps for large-scale environments.
Experience operating within regulated environments, including GxP, SOX, or comparable compliance frameworks.
Proven ability to influence architecture decisions and lead complex cross-functional technical initiatives.
Strong problem-solving, communication, and technical leadership skills.

Technical Skills Required

Enterprise security architecture and engineering
Network, cloud, application, and SaaS security
Palo Alto Networks security platforms
Zero Trust and identity-based security
Segmentation and access control
Cloud security posture management
Asset visibility and platform security
Perimeter and web application security
Security monitoring, telemetry, and governance
Security platform operations and automation
Infrastructure and hybrid environment security

Preferred Qualifications

Experience with Illumio or similar segmentation technologies.
Experience with Obsidian or similar SaaS security platforms.
Experience with Armis or similar asset visibility and security platforms.
AI and generative AI security
Experience in biotechnology, pharmaceutical, healthcare, or other highly regulated industries.
Experience leading large-scale security transformation and platform modernization initiatives.
Experience implementing and operating global security platforms and services.
Familiarity with industry security frameworks and standards such as NIST, ISO 27001, CIS, or similar.
Understanding of emerging AI security risks, governance models, and control frameworks.
Relevant certifications such as CISSP, CISM, CCSP, or equivalent.
Strong executive communication and stakeholder engagement skills.
Experience mentoring senior engineers and influencing technical direction across cybersecurity teams.

Benefits

Vertex offers a competitive and comprehensive benefits package designed to support employees' health, wellbeing, and professional growth, including:

Competitive compensation and incentive programs
Medical, dental, and vision coverage
Retirement savings programs
Paid time off and company holidays
Wellness and employee assistance programs
Professional development and career growth opportunities
A collaborative, inclusive, and mission-driven culture

#LI-HYBRID

Pay Range

$147,600 - $221,400

Disclosure Statement

The range provided is based on what we believe is a reasonable estimate for the base salary pay range for this job at the time of posting. This role is eligible for an annual bonus and annual equity awards. Some roles may also be eligible for overtime pay, in accordance with federal and state requirements. Actual base salary pay will be based on a number of factors, including skills, competencies, experience, and other job-related factors permitted by law.

At Vertex, our Total Rewards offerings also include inclusive market-leading benefits to meet our employees wherever they are in their career, financial, family and wellbeing journey while providing flexibility and resources to support their growth and aspirations. From medical, dental and vision benefits to generous paid time off (including a week-long company shutdown in the Summer and the Winter), educational assistance programs including student loan repayment, a generous commuting subsidy, matching charitable donations, 401(k) and so much more.

Flex Designation

Remote-Eligible

Flex Eligibility Status

In this Remote-Eligible role, you can choose to be designated as:
1. Remote: work remotely five days per week and come into the office on occasion - you're always welcome on-site; or select
2. Hybrid: work remotely up to two days per week; or select
3. On-Site: work five days per week on-site with ad hoc flexibility.

Note: The Flex status for this position is subject to Vertex's Policy on Flex @ Vertex Program and may be changed at any time.

#LI-Remote