Security Engineer (Corporate Security)

Your impact 

As a Security Engineer (Corporate Security) you will play a pivotal role in creating and maintaining a resilient, user-friendly and scalable corporate security environment at Isomorphic Labs. Operating with a proactive, service-minded approach and a strong bias for AI and automation, you will safeguard our workforce, identity systems, and sensitive data.

In this unique and polyvalent role, you will implement and maintain pragmatic corporate security controls across a wide range of domains such as IAM, DLP, corporate/external applications, and data governance. You will participate in detection and incident response and develop long-lasting measures to improve our corporate security posture. Beyond technical controls, you will also build scalable and secure operational processes across a wide range of domains such as data transfer or systems integration that will materially impact IsoLabs’ mission. You will directly support AI/medical researchers on security topics and will ensure our cross-functional teams can innovate rapidly, securely, and with total confidence.

What you will do 

• Corporate Identity & Access Management (IAM): Design, optimize, and support corporate IAM structures, including group architectures, identity system integration, and streamlined employee onboarding/offboarding workflows.
• Corporate Security Controls: Audit corporate systems security and deploy/maintain a wide range of security tools (e.g., logging, monitoring & DLP, data labeling, AI agents).
• Data Governance: Collaborating with Corp Engineering, enhance data governance and security within corporate systems (Google Workspace, Confluence, Jira, Slack, etc.) by gathering user needs and co-developing scalable operating models, appropriate configurations, and SOPs.
• Incident Response & Alert Triage: Partner closely with Detection & Response security engineers to improve and triage corporate security alerts, support incident response efforts when issues arise and address Google’ vulnerabilities and bugs.
• Security Awareness: Promote corporate security rules, support security awareness training and run social engineering exercises.
• Workplace Security: Collaborate with Workplace and Tech teams to ensure the security of physical systems (badges, lab workstations) and offices.
• Security of Operations & Processes: Translate key user needs and security compliance requirements into clear operational processes—such as establishing workflows for onboarding new tools, setting up data transfers and external system integrations.
• Third-Party Risk Management (TPRM): Execute standardized vendor and software audits, improve SaaS Security Posture Management (SSPM) through tools, and address third-party integrations and supply-chain safety risks.
• Automation & AI Integration: Leverage AI tools and agentic workflows to automate routine security tasks, optimize triage, and streamline operations.
• User Enablement: Act as a positive, proactive point of contact for internal teams, delivering user-oriented security solutions that reduce friction while upholding high security standards.

Skills and qualifications 

Essential:

• Fluency in navigating complex multi-org corporate systems’ workflows and processes.
• Experience with Atlassian’s and/or Google’s tech stacks.
• Proficiency in collecting user needs and business requirements, turning high-level guidance into efficient SOPs, policies, and guidelines documents.
• Strong foundation in Corporate Systems Security and IAM, including hands-on experience with SSO, user lifecycle management, and directory/group structures.
• Proficiency in basic Python, Go, or PowerShell to interface with REST APIs across SaaS ecosystems (Slack, Google Workspace, Okta).
• Knowledge of SaaS Security Posture Management (SSPM), and ideally, experience using tools like AppOmni, Adaptive Shield, or native SaaS log analysis to spot misconfigurations.
• Experience implementing Data Loss Prevention (DLP) corporate controls, data classification/labeling, and corporate data governance frameworks.
• Practical experience establishing or executing standardized vendor technical security assessments.
• Background in supporting security incident response and handling daily security alert triage.
• A strong bias for automation and an eagerness to leverage AI tools or agentic scanning mechanisms within corporate security workflows.
• Proactive, positive, and highly user-oriented mindset with exceptional communication skills to collaborate with technical and non-technical stakeholders alike.

Nice to have:

• Experience in high-growth tech environments, BioTech, ML-centric companies, or the pharmaceutical industry.
• Familiarity with OWASP Top 10 for LLMs, prompt injection prevention, and secure integration of internal AI assistants.
• Hands-on experience building or integrating AI-driven automation, agentic workflows, or custom scripts for security operations.
• Understanding of security patterns for Electronic Lab Notebooks (ELNs), Laboratory Information Management Systems (LIMS), or High-Performance Computing (HPC) environments.
• Familiarity with GitHub Enterprise security settings, secret scanning, and developer environment hardening.
• Familiarity with common data protection regulations and security frameworks (e.g., GDPR, ISO 27001).
• Relevant industry certifications (e.g., Security+, CISSP, CISA, GSEC).