> Markdown version of [/jobs/ext/4705561-security-engineer](https://www.wearedevelopers.com/jobs/ext/4705561-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Engineer - **Company:** Iovance Biotherapeutics - **Location:** United States (Remote available) - **Experience:** Expert - **Salary:** $125,000 - $140,000 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Active Directory, Amazon Web Services, Amazon Elastic Compute Cloud, Amazon S3, Data Analysis, Bash Shell, Microsoft Online Services, Cloud Computing, Cloud Computing Security, Code Review, Cyber Security, Databases, Continuous Integration, Domainkeys Identified Mail, Domain-Based Message Authentication Reporting and Conformance (DMARC), Github, Identity and Access Management, Python (Programming Language), Lightweight Directory Access Protocols (LDAP), OAuth, OpenID, Windows PowerShell, Azure Active Directory, Anti-Phishing, Security Assertion Markup Language (SAML), Microsoft SharePoint, Security Information and Event Management, Scripting, Okta, Cyberark, Amazon Virtual Private Cloud (VPC), Cloudformation, Microsoft InTune, National Institute of Standards and Technology Cybersecurity Framework, Sender Policy Framework (SPF), Spoofing, Information Technology, Patch Management, CIS Benchmarks, Terraform, Devsecops, GXP - **Published:** November 13, 2026 - **Apply:** https://www.builtincolorado.com/job/security-engineer-ii/12205653?handler=ApplyRedirect ## About the Role * Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent experience. * 5+ years of hands-on experience in security engineering or cloud security. * Hands-on experience with CrowdStrike Falcon EDR and a SIEM platform, preferably Falcon Next-Gen SIEM (LogScale), including detection development. * Experience administering an enterprise PAM solution (e.g., CyberArk, BeyondTrust, Delinea). * Experience with Mimecast or a comparable secure email gateway. * Practical experience securing AWS environments (EC2, ECS, ELB, S3, WAF, IAM, VPC). * Hands-on experience securing Microsoft 365, including Entra ID, Conditional Access, Exchange Online, and Purview. * Working knowledge of GitHub security features and CI/CD security. * Solid foundation in networking, DNS, TLS, and identity protocols (SAML, OIDC, OAuth, LDAP). * Scripting experience in Python, PowerShell, or Bash. * Strong written communication and audit-ready documentation skills. Preferred Education, Skills, and Knowledge * Experience in a regulated life sciences or healthcare environment (GxP, 21 CFR Part 11, HIPAA, SOX). * Experience with Okta and Microsoft Entra ID/Intune. * Familiarity with Terraform, NIST CSF, NIST 800-53, and CIS Controls. * Certifications such as CrowdStrike CCFA/CCFR/CCFH, AWS Certified Security - Specialty, CISSP, or GIAC. Physical Demands and Activities Required The physical demands described here represent those an employee may encounter while performing the essential functions of this job. Reasonable accommodation may be provided to enable individuals to perform these functions. * Ability to remain in a stationary position for extended periods * Ability to move about within an office or remote workspace and exert up to 10 pounds of force occasionally * Visual acuity sufficient for preparing and analyzing data, viewing computer screens, and extensive reading * Repetitive motion involving wrists, hands, and/or fingers * Ability to communicate effectively to exchange information * Ability to engage in analytical, conceptual, and problem-solving activities in a dynamic business environment Mental: Clear and conceptual thinking ability; excellent judgment, troubleshooting, problem-solving, analysis, and discretion; ability to handle work-related stress; ability to handle multiple priorities simultaneously with a sense of urgency; and ability to meet deadlines ## Description We are seeking a hands-on Security Engineer with strong technical depth across endpoint, cloud, identity, and email security. This role designs, deploys, and operates Iovance's core security platforms, including CrowdStrike Falcon EDR and Next-Gen SIEM, privileged access management, Mimecast, AWS security services, and GitHub security. The right candidate builds policy, writes detections and automation, troubleshoots across the stack, and documents their work to the standard expected in a validated, audit-ready environment. Essential Functions and Responsibilities Endpoint Detection, SIEM & Response (CrowdStrike) * Administer and tune CrowdStrike Falcon prevention policies, host groups, device control, and sensor updates across Windows, macOS, and Linux, with careful exclusion management for GxP and manufacturing systems. * Onboard and normalize log sources (Okta, AWS, Mimecast, GitHub, PAM, servers) into Falcon Next-Gen SIEM, and build detections, dashboards, and Falcon Fusion SOAR workflows. * Investigate alerts, conduct threat hunting, and drive containment and remediation. Privileged Access Management * Operate the enterprise PAM platform, including vaulting, credential rotation, session recording, and just-in-time access for servers, cloud accounts, databases, and service accounts. * Integrate PAM with Okta and Active Directory, and support privileged access reviews and segregation-of-duties controls. Email Security (Mimecast) * Administer Mimecast targeted threat protection, DLP, archiving, and continuity policies, and maintain SPF, DKIM, and DMARC. * Investigate phishing, impersonation, and business email compromise attempts. Cloud & DevSecOps Security (AWS, Microsoft 365 & GitHub) * Secure AWS workloads including EC2, ECS, ELB/ALB, S3, and VPC networking, using AWS WAF, IAM, KMS, GuardDuty, Security Hub, Config, and CloudTrail. * Identify and remediate misconfigurations, enforce least privilege, and review infrastructure-as-code (Terraform/CloudFormation). * Harden and monitor Microsoft 365, including Entra ID Conditional Access, Exchange Online, SharePoint/OneDrive/Teams sharing controls, Microsoft Purview DLP and sensitivity labels, and Microsoft Secure Score recommendations. * Administer GitHub Advanced Security (code scanning, secret scanning, Dependabot), branch protection, and organization policies, and secure GitHub Actions pipelines using OIDC federation to AWS. Governance, Compliance & Operations * Author technical documentation, standards, and runbooks suitable for GxP, SOX, and HIPAA audits, and provide audit evidence. * Participate in change control, vulnerability and patch management, incident response, and on-call rotation.