Security Engineer II

The role

Design, deploy and operate Iovance's core security platforms, including CrowdStrike Falcon EDR and Next-Gen SIEM, privileged access management, Mimecast, AWS security services and GitHub security. Build policy, write detections and automation, and document the work to audit-ready standards.

What you will do

• Administer and tune CrowdStrike Falcon prevention policies, host groups, device control and sensor updates across Windows, macOS and Linux
• Onboard log sources into Falcon Next-Gen SIEM and build detections, dashboards and Falcon Fusion SOAR workflows
• Investigate alerts, conduct threat hunting, and drive containment and remediation
• Operate the enterprise PAM platform, including vaulting, credential rotation, session recording and just-in-time access
• Integrate PAM with Okta and Active Directory and support privileged access reviews
• Administer Mimecast policies, maintain SPF, DKIM and DMARC, and investigate phishing and business email compromise
• Secure AWS workloads and remediate misconfigurations, enforcing least privilege and reviewing infrastructure-as-code
• Harden and monitor Microsoft 365, including Entra ID Conditional Access, Exchange Online, and Purview DLP
• Administer GitHub Advanced Security, branch protection and organization policies, and secure GitHub Actions pipelines
• Author technical documentation, standards and runbooks for GxP, SOX and HIPAA audits, and participate in incident response

Required qualifications

• Bachelor's degree in Computer Science, Information Security or a related field, or equivalent experience
• 5+ years of hands-on experience in security engineering or cloud security
• Hands-on experience with CrowdStrike Falcon EDR and a SIEM platform, including detection development
• Experience administering an enterprise PAM solution (e.g., CyberArk, BeyondTrust, Delinea)
• Experience with Mimecast or a comparable secure email gateway
• Practical experience securing AWS environments (EC2, ECS, ELB, S3, WAF, IAM, VPC)
• Hands-on experience securing Microsoft 365, including Entra ID, Conditional Access, Exchange Online and Purview
• Working knowledge of GitHub security features and CI/CD security
• Solid foundation in networking, DNS, TLS and identity protocols (SAML, OIDC, OAuth, LDAP)
• Scripting experience in Python, PowerShell or Bash
• Strong written communication and audit-ready documentation skills
• Ability to remain stationary for extended periods, exert up to 10 pounds of force occasionally, and do repetitive hand motion

Nice to have

• Experience in a regulated life sciences or healthcare environment (GxP, 21 CFR Part 11, HIPAA, SOX)
• Experience with Okta and Microsoft Entra ID/Intune
• Familiarity with Terraform, NIST CSF, NIST 800-53 and CIS Controls
• Certifications such as CrowdStrike CCFA/CCFR/CCFH, AWS Certified Security – Specialty, CISSP or GIAC

Before you apply

• Reasonable accommodation may be provided for physical job functions
• Candidates can contact careers@iovance.com for application assistance or accommodation

About the company

Iovance Biotherapeutics is a cell therapy company focused on tumor infiltrating lymphocyte (TIL) therapies for solid tumors. Its approved treatment Amtagvi is available at more than 95 authorized treatment centers, with centralized U.S.-based manufacturing.