Senior Engineer, IT Security

Crinetics is a pharmaceutical company based in San Diego, California, developing much-needed therapies for people with endocrine diseases and endocrine-related tumors. We were founded by a dedicated team of scientists with the simple belief that better therapies developed from rigorous innovation can lead to better lives. Our work continues to make a real difference in the lives of patients. We have a prolific discovery engine and a robust preclinical and clinical development pipeline. We are driven by science with a patient-centric and team-oriented culture. Crinetics is known for its inclusive workplace culture. We are also a dog-friendly workplace. This is an exciting time to join Crinetics as we shape our organization into the world’s premier fully-integrated endocrine company from discovery to patients. Join our team as we transform the lives of others.

Position Summary:

The Senior Engineer of IT Security will serve as a strategic partner and trusted advisor to Crinetic's IT and Security Teams and supporting functions. Crinetics is in an exciting growth organization where a robust digital strategy and execution are key to the success of the asset Commercialization, R&D pipeline and ongoing excellence of operations.

Essential Job Functions and Responsibilities:

These may include but are not limited to:

• Build effective relationships with the IT and Security teams.
• Conduct specific activities and deliverables as directed by Security leadership.
• Demonstrated ability to take high-level objectives or tasks and independently define, design, and execute the necessary steps to achieve the desired outcomes.
• Maintains a pulse on security trends and threats and communicates to appropriate Security and IT staff.
• Performs security activities required to establish and maintain compliance with various regulatory standards established by governing Regulatory agencies including ICH, FDA and EMEA.
• Deploy and optimize detection and response technologies (e.g., SIEM, IDS/IPS, EDR).
• Automate and codify detection and response processes and playbooks.
• Develop technical solutions and security tools to help mitigate security vulnerabilities and automate repeatable tasks.
• Analyze endpoint, network, and application logs for anomalous events, with a focus on applying automation where applicable.
• Demonstrated experience securing Identity and Access Management systems in alignment with industry best practices.
• Strong experience implementing security controls in cloud hosted environments using tools and technologies (IAM, MFA, SSO, DLP systems, Firewall/IDS/IPS systems, Secure Configurations, Network/application vulnerability scanners such as Tenable, Nessus, Qualys etc.).
• Experience securing public cloud infrastructure and workloads.
• Knowledge of adversary tactics, techniques, and procedures (TTPs) and MITRE ATT&CK principles.
• Assist in managing and maintaining security awareness training program on information security standards, policies, and best practices for employees.
• Contribute to incident response plans and procedures; Conducts investigations, event triage, and incident mitigation as needed.

Education and Experience:

Required:

• Bachelor's degree or equivalent experience required.
• 5+ years experience as a security engineer, security analyst, or similar role.
• Served in a business relationship capacity or consultancy to designated business functions with a proven track record of delivering business and technical solutions
• Professional demeanor, excellent oral, and written communication skills to all levels of the organization.
• Ability to multi-task and shift priorities rapidly to meet tight deadlines.
• Detail oriented and well organized and self-motivated.

Preferred:

• CISSP certification
• Apply knowledge of the biotech/ pharmaceutical industry

Physical Demands and Work Environment:

Physical Activities: On a continuous basis, sit at desk for a long period of time; intermittently answer telephone and write or use a keyboard to communicate through written means. Some walking and lifting up to 25 lbs. may be required. The noise level in the work environment is typically low to moderate. The physical demands described above are representative of those that must be met by an employee to successfully perform the essential functions and responsibilities of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions and responsibilities.

Laboratory Activities (if applicable): Biology and chemical laboratory environment experience needed. Environmental health and safety requirements also apply