Associate Director, Information Security Engineering & Operations

<div class="content-intro"><p>ElevateBio is a technology-driven company powering the industry forward by helping partners realize the potential of their therapies from design to commercialization. We have integrated a differentiated set of technologies, end-to-end services, and industry-leading manufacturing expertise to develop advanced therapies faster and more efficiently.</p></div><p> </p> <p><strong><span data-contrast="auto">The Role</span></strong><span data-ccp-props="{}"> </span></p> <p><span data-contrast="auto">Reporting to the VP, Head of Information Security, the Associate Director of Information Security Engineering & Operations is responsible for the design, implementation, operation, and continuous improvement of ElevateBio's security infrastructure across the full technology stack. This role requires both exceptional technical depth and broad operational scope, spanning endpoint protection, cloud security, identity threat protection, OT security, vulnerability management, incident response, and security automation.</span><span data-ccp-props="{}"> </span></p> <p><span data-contrast="auto">The ideal candidate is a hands-on engineer and operator who thrives in a fast-paced environment, can independently manage and evolve a complex security toolset, and is driven to automate and integrate wherever possible. This is a hybrid role based in Waltham, MA.</span><span data-ccp-props="{}"> </span></p> <p><strong><span data-contrast="auto">Here’s What You’ll Do</span><span data-ccp-props="{}"> </span></strong></p> <ul> <li><span data-contrast="auto">Automate and integrate AI into our security operations processes</span><span data-ccp-props="{}"> </span></li> <li><span data-contrast="auto">Design, implement, operate, and continuously improve information security tools, platforms, and architecture across the enterprise</span><span data-ccp-props="{}"> </span></li> <li><span data-contrast="auto">Operate, maintain, automate, and evolve endpoint detection and response (EDR) and managed detection and response (MDR) platforms, including oversight of third-party MDR partnerships</span><span data-ccp-props="{}"> </span></li> <li><span data-contrast="auto">Own, mature, and automate the vulnerability management program, ensuring timely identification, prioritization, and remediation of vulnerabilities</span><span data-ccp-props="{}"> </span></li> <li><span data-contrast="auto">Maintain, operate, automate, and evolve automated patching, identity threat protection, threat intelligence, cloud security, zero-trust network access (ZTNA), and OT security platforms</span><span data-ccp-props="{}"> </span></li> <li><span data-contrast="auto">Implement and mature a data security program</span><span data-ccp-props="{}"> </span></li> <li><span data-contrast="auto">Oversee and automate security monitoring, triage security incidents, and lead incident response efforts</span><span data-ccp-props="{}"> </span></li> <li><span data-contrast="auto">Develop and maintain security standards, hardening baselines, and configuration benchmarks</span><span data-ccp-props="{}"> </span></li> <li><span data-contrast="auto">Automate and integrate security tooling to maximize efficiency, coverage, and response speed</span><span data-ccp-props="{}"> </span></li> <li><span data-contrast="auto">Perform technology, architecture, and security reviews for new and existing systems</span><span data-ccp-props="{}"> </span></li> </ul> <p><strong><span data-contrast="auto">Requirements</span></strong><span data-ccp-props="{}"> </span></p> <p><span data-contrast="auto">Education & Experience</span><span data-ccp-props="{}"> </span></p> <ul> <li><span data-contrast="auto">Bachelor's degree in a relevant field or equivalent experience</span><span data-ccp-props="{}"> </span></li> <li><span data-contrast="auto">5+ years of experience in information security</span><span data-ccp-props="{}"> </span></li> </ul> <p><span data-contrast="auto">Technical Skills</span><span data-ccp-props="{}"> </span></p> <ul> <li><span data-contrast="auto">Strong knowledge of endpoint security, EDR/MDR platforms, and vulnerability management</span><span data-ccp-props="{}"> </span></li> <li><span data-contrast="auto">Experience with cloud security tools and concepts (CSPM, SSPM, cloud-native security controls)</span><span data-ccp-props="{}"> </span></li> <li><span data-contrast="auto">Knowledge of zero-trust architecture and ZTNA implementations</span><span data-ccp-props="{}"> </span></li> <li><span data-contrast="auto">Experience with identity and access management and identity threat protection</span><span data-ccp-props="{}"> </span></li> <li><span data-contrast="auto">Familiarity with OT/ICS security concepts</span><span data-ccp-props="{}"> </span></li> <li><span data-contrast="auto">Strong understanding of TCP/IP networking, firewalls, VPNs, and network security