Information Security Engineer

Medpace
Greater London
2 weeks ago
Create job alert

Job Summary

The Information Security team defends the company’s digital infrastructure by designing, implementing, and improving the company’s cybersecurity architecture. This is a critical role responsible for protecting infrastructure, cloud, edge devices, and data against unauthorized use, modification, exfiltration, or damage. This role identifies threats, manages projects, and engineers solutions that impact the entire company. An ideal candidate for this role is technical, dedicated to learning new things, security-minded, strong initiative, and able to manage projects autonomously.

This role is office-based in the central London Medpace office. You must be located within commuting distance to be considered for this position.

Responsibilities

  • Engineer security solutions without oversight and collaborate with multiple departments;
  • Analyze security systems and seek improvements on a continuous basis;
  • Research vulnerabilities, perform vulnerability scanning, and mitigate threats;
  • Develop security best practices and policies for the organization;
  • Document new processes, cross-train coworkers, and assist employees on security-related matters;
  • Provide security awareness training and testing for employees to verify proper security protocols are being followed;
  • Stay current with cybersecurity knowledge by participating in educational opportunities, reading professional publications, and participating in professional organizations;
  • Perform cyber security incident response and remediation activities;
  • Facilitate access reviews of company data and revoke inappropriate/overprovisioned access in order to drive least privilege access.

Qualifications

  • Require at least a bachelor’s degree preferably in Information Technology;
  • Require a minimum of at least 2 years of experience in implementing Information Security solutions;
  • Understanding of security best practices and how to implement them at a business-wide level;
  • Experience with managing, configuring, and deploying enterprise-grade security solutions in some of the following:
    • SIEM
    • Privileged Access Management/Identity Access Management/Multifactor Authentication
    • Endpoint Detection & Response
    • Network Access Control
    • Cloud based architecture such as Azure/AWS
    • Active Directory
  • Soft skills including excellent communication skills, critical thinking skills with the ability to solve problems as they arise, and ability to prioritize projects;
  • Basic scripting skills, such as PowerShell/Python scripting.

Nice to have:

  • Experience with vulnerability assessment tools such as Nessus and Tenable;
  • Experience with enterprise web proxy solutions, web filters, and VPN;
  • Experience with email security solutions;
  • Experience with firewall and network architecture;
  • Experience with administrating Windows environment including GPO and servers;
  • Previous employment or experience in a highly regulated industry such as healthcare, financial, or defense experience with standards such as ISO, NIST, HIPAA, GDPR, SOC Type 2, etc.;
  • Auditing and policy-writing experience.

Medpace Overview

Medpace is a full-service clinical research organization (CRO). We provide Phase I-IV clinical development services to the biotechnology, pharmaceutical, and medical device industries. Our mission is to accelerate the global development of safe and effective medical therapeutics through its scientific and disciplined approach. We leverage local regulatory and therapeutic expertise across all major areas including oncology, cardiology, metabolic disease, endocrinology, central nervous system, anti-viral, and anti-infective. Headquartered in Cincinnati, Ohio, employing more than 5,000 people across 40+ countries.

Why Medpace?

People. Purpose. Passion. Make a Difference Tomorrow. Join Us Today.

The work we’ve done over the past 30+ years has positively impacted the lives of countless patients and families who face hundreds of diseases across all key therapeutic areas. The work we do today will improve the lives of people living with illness and disease in the future.

Medpace Perks

  • Flexible work environment
  • Competitive compensation and benefits package
  • Competitive PTO packages
  • Structured career paths with opportunities for professional growth
  • Company-sponsored employee appreciation events
  • Employee health and wellness initiatives

Awards

  • Recognized by Forbes as one of America's Most Successful Midsize Companies in 2021, 2022, 2023, and 2024
  • Continually recognized with CRO Leadership Awards from Life Science Leader magazine based on expertise, quality, capabilities, reliability, and compatibility

What to Expect Next

A Medpace team member will review your qualifications and, if interested, you will be contacted with details for next steps.

EO/AA Employer M/F/Disability/Vets

#J-18808-Ljbffr

Related Jobs

View all jobs

Information Security Engineer ( Remote / Start-up )

Information Security Engineer ( Remote / Start-up )

Senior Security Engineer - 12 month FTC

Information Technology Security Engineer

Windows Security Engineer

Cyber Security Engineer ( Bridlington / Hybrid )

Get the latest insights and jobs direct. Sign up for our newsletter.

By subscribing you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

10 Must-Read Cyber Security Books for UK Professionals: Boost Your Career and Stay Ahead of Threats

With rapid advancements in digital infrastructure, cloud computing, and the Internet of Things (IoT), cyber threats continue to evolve at lightning speed. For organisations across the UK—and globally—robust cyber security is no longer optional: It’s a strategic imperative. From healthcare and finance to government agencies and tech start-ups, every sector needs skilled professionals to safeguard critical data and protect users. If you’re looking to break into or advance within the cyber security industry, staying updated on the latest techniques, threat landscapes, and defence strategies is paramount. One of the best ways to build and sharpen your expertise is by reading authoritative, high-quality books that combine foundational knowledge with cutting-edge insights. In this guide, we’ve compiled a list of ten books that cater to various skill levels, spanning ethical hacking and threat intelligence to secure software development and cryptography. By diving into these resources, you’ll fortify your understanding of cyber security fundamentals, explore hands-on techniques for defending systems, and gain the strategic perspective needed to excel in roles throughout the UK’s thriving cyber security landscape.

Navigating Cybersecurity Career Fairs Like a Pro: Preparing Your Pitch, Questions to Ask, and Follow-Up Strategies to Stand Out

In a world where digital threats are escalating and online infrastructure underpins nearly every aspect of our personal and professional lives, cybersecurity has swiftly become one of the most sought-after career fields. Demand for skilled cybersecurity professionals outstrips supply, both in the UK and globally. From ethical hackers and penetration testers to governance, risk, and compliance (GRC) specialists, the opportunities are extensive—and lucrative. Amidst this surge in demand, cybersecurity career fairs provide an invaluable chance to meet potential employers face-to-face, gain industry insights, and make connections that can accelerate your career trajectory. Unlike applying to countless jobs online, these events bring companies, security leaders, and aspiring candidates together under one roof. When approached with the right strategy, a single conversation at a cybersecurity fair can open the door to your dream job. In this comprehensive guide, we’ll explore how to prepare thoroughly, engage confidently, and follow up effectively after a cybersecurity career fair. By incorporating these insights into your approach, you’ll stand out from the crowd and maximise your chances of securing the perfect role in this fast-growing field.

Common Pitfalls Cyber Security Job Seekers Face and How to Avoid Them

The cyber security industry in the UK and worldwide is experiencing rapid growth. With cyber attacks growing in sophistication and frequency, organisations are investing more resources than ever into defending their digital assets. From penetration testers and threat analysts to security architects and compliance officers, cyber security professionals are in high demand across a variety of sectors—including finance, healthcare, government, and retail. Yet, in spite of this high demand, the process of landing a cyber security role can be more challenging than many candidates anticipate. The stakes are high: prospective employers entrust cyber professionals with their most sensitive data, their compliance posture, and often their core business operations. Therefore, they’re looking for candidates who can demonstrate not just technical know-how, but also excellent communication, adaptability, and an awareness of the broader business context. In this article, we’ll explore the most common pitfalls that cyber security job seekers face, especially in the UK market, and how to avoid them. Whether you’re a recent graduate, a professional transitioning from a different field, or an experienced practitioner aiming for a senior role, these insights will help you stand out and secure the opportunities that fit your skill set and career goals.