Senior Information Security Engineer

Senior Information Security EngineerLocation: Must be able to work out of one of our offices Tuesday, Wednesday, and Thursdays.Office options that you can work out of: New York City, NY; Durham, NC; Pittsburgh, PAPay: The expected annual base salary for this position is $300,000-$1,000,000. Our compensation package also includes sign-on bonuses, year-end bonuses, and generous benefits, including relocation assistance. Position OverviewWe are seeking a Senior Information Security Engineer to lead the design, implementation and operation of security controls for agentic AI systems and biotech infrastructures. This role combines deep security engineering, threat detection and vulnerability management with hands-on Linux and Python expertise to protect complex AI-driven environments and sensitive biotech data. The ideal candidate will translate technical risk into actionable mitigation, build detection and response capabilities, and partner across engineering, research and compliance teams to enable secure innovation.Key ResponsibilitiesDesign and implement security architectures specifically for agentic AI and multi-agent systems, including secure model training, inference, orchestration and inter-agent communication.Develop, deploy and tune threat detection and response capabilities (SIEM, EDR, XDR) to identify adversarial behaviors, model manipulation and infrastructure compromise across cloud and on-premise environments.Lead vulnerability management across systems and applications: conduct vulnerability discovery, prioritization, patching strategies and verification; run regular scans and coordinate remediation with engineering teams.Harden Linux hosts and containerized environments used for AI workloads and biotech pipelines; define baseline images, configuration management, and runtime protections.Automate security workflows and tooling using Python: build detection rules, incident response playbooks, pipelines for vulnerability triage, and integration with CI/CD for secure releases.Collaborate with biotech research teams to secure laboratory information management systems (LIMS), instrument interfaces and data stores; perform threat modeling and risk assessments for lab-to-cloud integrations.Drive incident response and forensics for security events involving AI components or biotech infrastructure; lead post-incident reviews and continuous improvement.Establish and maintain security best practices, secure coding guidelines, and developer/security training focused on AI-specific and biotech-specific risks.Support compliance, audits and documentation efforts relevant to biotech environments (e.g., data privacy, GxP/HIPAA where applicable) and contribute to policy development for agentic AI safety and governance.QualificationsBachelor's or Masters degree in Computer Science, Cybersecurity, Bioinformatics, or a related field, or equivalent experience.5+ years of experience in information security engineering with demonstrable experience in threat detection, vulnerability management and incident response.Hands-on experience securing agentic AI systems, multi-agent architectures or ML platforms, with understanding of adversarial ML risks and mitigation strategies.Strong Linux administration skills and experience hardening hosts and container platforms (Docker, Kubernetes) in production environments.Proficient in Python for automation, detection engineering, tooling and scripting; experience integrating security tooling into CI/CD pipelines.Experience working in or supporting biotech, life sciences or laboratory environments, with awareness of domain-specific dataflows, instrumentation interfaces and regulatory considerations.Practical experience with SIEM/EDR/XDR platforms, vulnerability scanners, forensic tools, and security orchestration (SOAR) solutions.Track record of vulnerability management: discovery, prioritization, remediation coordination and verification across distributed systems.Relevant certifications preferred (e.g., CISSP, GCP Cloud Security, OSCP, GIAC certifications) and strong knowledge of secure software development practices.Excellent communication, cross-functional collaboration skills, and the ability to translate technical risk for technical and non-technical stakeholders.BenefitsVacation/PTOMedicalDentalVision401kBonusRelocation