Analyst II, Information Security

Job Description

Job Description

Arrowhead Pharmaceuticals, Inc. (Nasdaq ARWR) is a commercial stage biopharmaceutical company that develops medicines that treat intractable diseases by silencing the genes that cause them. Using a broad portfolio of RNA chemistries and efficient modes of delivery, Arrowhead therapies trigger the RNA interference mechanism to induce rapid, deep, and durable knockdown of target genes. RNA interference, or RNAi, is a mechanism present in living cells that inhibits the expression of a specific gene, thereby affecting the production of a specific protein. Arrowhead's RNAi-based therapeutics leverage this natural pathway of gene silencing.

Arrowhead is focused on developing innovative drugs for diseases with a genetic basis, typically characterized by the overproduction of one or more proteins that are involved with disease. The depth and versatility of our RNAi technologies enables us to potentially address conditions in virtually any therapeutic area and pursue disease targets that are not otherwise addressable by small molecules and biologics. Arrowhead is leading the field in bringing the promise of RNAi to address diseases outside of the liver, and our clinical pipeline includes disease targets in the liver and lung with a promising pipeline of preclinical candidates.

Arrowhead's corporate headquarters is in Pasadena, CA with research and development teams in Madison, WI & San Diego, CA, and a state of the art manufacturing facility in Verona, WI. Our employees are nimble, science-driven innovators who are collaborating to bring new therapies to patients in need.

The Position

We're seeking an Information Security Analyst with a strong foundation in Help Desk or System Administration and expertise in Microsoft Intune, or Defender. You'll design, implement, and maintain secure endpoint baselines, enforce configuration and compliance, and collaborate closely with IT operations to reduce risk and improve our security posture. This role is ideal for someone who has worked extensively with Windows and Microsoft 365 administration, enjoys solving complex configuration problems, and wants to grow their impact on information security.

Responsibilities

• Create secure endpoint configuration baselines via Group Policy or Intune based on published security frameworks (NIST, CIS, etc.)
• Triage security alerts and escalate as necessary.
• Create, test, and deploy conditional access policies.
• Create, maintain, and troubleshoot firewall security policies.
• Participate in regular audits to ensure security practices are compliant with company policies and applicable laws.
• Standardize and enforce Intune compliance policies, device configuration profiles, and remediation scripts.
• Coordinate with IT to minimize user friction while maximizing control (test rings, staged rollouts, rollback plans).
• Monitor endpoint configuration compliance and remediate drift.
• Contribute to Microsoft Entra ID hardening: Conditional Access, MFA configuration, device compliance gates, role-based access, Privileged Identity Management (PIM).
• Use PowerShell and/or Intune remediation scripts to automate repetitive tasks, reporting, and configuration drift checks.
• Maintain clear documentation (runbooks, diagrams, standards, exceptions) and contribute to a knowledge base.

Requirements

• Bachelor's degree in Information Security, Information Technology, Computer Science, or a related field, or equivalent practical experience
• 3+ years of experience in Information Security, System Administration, Help Desk, or similar roles
• Exposure to MDM/MAM policies for Windows/macOS/iOS/Android
• Demonstrated hands-on experience administering EDR (Microsoft Defender, Crowdstrike Falcon, Sentinel One)
• Experience working within or supporting a regulated industry environment
• Strong analytical and problem-solving skills with the ability to investigate alerts, interpret audit logs, and distinguish signal from noise
• Effective written and verbal communication skills, with the ability to explain technical concepts to non-technical stakeholders

Preferred

• Cybersecurity experience in an OT or manufacturing environment
• Experience with Dragos OT security
• Certifications relevant to security and compliance
• Prior experience in the pharmaceutical, biotech, or life sciences sector
• Exposure to SIEM tools, endpoint detection and response (EDR) platforms, or identity and access management systems
• Exposure to Intune device configurations and MDM Policies
• Experience in GxP environments

Wisconsin pay range

$80,000—$100,000 USD

Arrowhead provides competitive salaries and an excellent benefit package.

Candidates must have current, valid authorization to work in the country where this role is located.

California Applicant Privacy Policy