Public summary
A growing technology company in pharmaceutical R&D is hiring a hands-on Security Lead to define, operationalize, and scale security capabilities across cloud and application environments. Responsibilities include managing incident response, vulnerability management, security tooling, and embedding security throughout systems and development processes. The role involves collaboration with engineering, product, and leadership teams to ensure security practices support scalable AI-powered drug discovery platforms. Ideal candidates have 5+ years in security engineering, expertise with AWS security, secure SDLC practices, and compliance knowledge such as ISO 27001 or SOC 2. The position offers competitive compensation, remote-first work, and benefits focused on wellbeing and professional growth.
Location and work setup
- Location
- Berlin
- Remote status
- Remote
- German requirement signal
- No German Required Detected
- Detected job language
- English
Responsibilities
Lead cloud and application security including AWS architecture, IAM, network security, and secure configurations. Drive application security practices such as secure coding guidance, threat modeling, and automated security testing within SDLC. Manage incident response including playbook development and threat detection coordination. Oversee vulnerability management ensuring risk mitigation with engineering teams. Maintain and evolve security tooling including monitoring, SIEM, and secrets management. Collaborate with engineering and platform teams to embed security in design and architecture. Contribute to security compliance frameworks like ISO 27001 and SOC 2. Manage corporate and IT security including endpoint management and external IT provider oversight. Lead security reviews for enterprise customers. Stay informed of emerging security threats and best practices to continuously improve security posture.
Qualifications
Bachelor's degree in Computer Science, Engineering or equivalent technical experience. Minimum 5 years in security engineering or similar roles with strong AWS security architecture skills. Experience in secure SDLC implementation and close collaboration with engineering teams. Knowledge of modern authentication, authorization, secrets management, and infrastructure-as-code security. Proven experience in incident handling, vulnerability management, and threat detection. Familiarity with compliance programs such as ISO 27001 and SOC 2. Strong interpersonal skills to influence secure design decisions and mentor team members. Nice to have experience includes Data Protection Officer duties, GDPR knowledge, team leadership, pharma deployment environments, and B2B SaaS/AI-powered product security.