Information Security Engineer

Medpace
London
1 month ago
Create job alert

The Information Security team defends the company’s digital infrastructure by designing, implementing, and improving the company’s cybersecurity architecture. This is a critical role responsible for protecting infrastructure, cloud, edge devices, and data against unauthorized use, modification, exfiltration, or damage. This role identifies threats, manages projects and engineers solutions that impact the entire company. An ideal candidate for this role is technical, dedicated to learning new things, security-minded, strong initiative, and able to manage projects autonomously.

This role is office-based in the central London Medpace office. You must be located within commuting distance to be considered for this position.


Responsibilities

  • Engineer security solutions without oversight and collaborate with multiple departments;
  • Analyze security systems and seek improvements on a continuous basis;
  • Research vulnerabilities, perform vulnerability scanning, and mitigate threats;
  • Develop security best practices and policies for the organization;
  • Document new processes, cross-train coworkers, and assist employees on security-related matters;
  • Provide security awareness training and testing for employees to verify proper security protocols are being followed;
  • Staying current with cybersecurity knowledge by participating in educational opportunities, reading professional publications, and participating in professional organizations;
  • Performing cyber security incident response, and remediation activities;
  • Facilitate access reviews of company data and revoke inappropriate/overprovisioned access in order to drive least privilege access.


Qualifications

  • Require at least a bachelor’s degree preferably in Information Technology;
  • Require a minimum of at least 2 years of experience in implementing Information Security solutions;
  • Understanding of security best practices and how to implement them at a business-wide level;
  • Experience with managing, configuring, and deploying enterprise-grade security solutions in some of the following:
    • SIEM
    • Privileged Access Management/Identity Access Management/Multifactor Authentication
    • Endpoint Detection & Response
    • Network Access Control
    • Cloud based architecture such as Azure/AWS
    • Active Directory
  • Soft skills including excellent communication skills, critical thinking skills with the ability to solve problems as they arise, and ability to prioritize projects;
  • Basic scripting skills, such as PowerShell/Python scripting.

Nice to have:

  • Experience with vulnerability assessment tools such as Nessus and Tenable;
  • Experience with enterprise web proxy solutions, web filters, and VPN;
  • Experience with email security solutions;
  • Experience with firewall and network architecture;
  • Experience with administrating Windows environment including GPO and servers;
  • Previous employment or experience in a highly regulated industry such as healthcare, financial, or defense experience with standards such as ISO, NIST, HIPAA, GDPR, SOC Type 2, etc;
  • Auditing and policy-writing experience.


Medpace Overview

Medpace is a full-service clinical research organization (CRO). We provide Phase I-IV clinical development services to the biotechnology, pharmaceutical and medical device industries. Our mission is to accelerate the global development of safe and effective medical therapeutics through its scientific and disciplined approach. We leverage local regulatory and therapeutic expertise across all major areas including oncology, cardiology, metabolic disease, endocrinology, central nervous system, anti-viral and anti-infective. Headquartered in Cincinnati, Ohio, employing more than 5,000 people across 40+ countries.


Why Medpace?

People. Purpose. Passion. Make a Difference Tomorrow. Join Us Today.

The work we’ve done over the past 30+ years has positively impacted the lives of countless patients and families who face hundreds of diseases across all key therapeutic areas. The work we do today will improve the lives of people living with illness and disease in the future.

Medpace Perks

  • Flexible work environment
  • Competitive compensation and benefits package
  • Competitive PTO packages
  • Structured career paths with opportunities for professional growth
  • Company-sponsored employee appreciation events
  • Employee health and wellness initiatives

Awards

  • Recognized by Forbes as one of America's Most Successful Midsize Companies in 2021, 2022, 2023 and 2024
  • Continually recognized with CRO Leadership Awards from Life Science Leader magazine based on expertise, quality, capabilities, reliability, and compatibility

What to Expect Next

A Medpace team member will review your qualifications and, if interested, you will be contacted with details for next steps.

EO/AA Employer M/F/Disability/Vets

#J-18808-Ljbffr

Related Jobs

View all jobs

Information Security Engineer

Information Security Engineer

Information Security Engineer - Development and Automation

Information Security Engineer

Cloud Security Engineer / Information Security Engineer

Senior Information Security Engineer

Get the latest insights and jobs direct. Sign up for our newsletter.

By subscribing you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

Job-Hunting During Economic Uncertainty: Cyber Security Edition

The cybe rsecurity sector sits at the forefront of today’s digital landscape, defending businesses and governments alike from increasingly sophisticated threats. From incident response and network security to cloud protections and zero-trust architectures, cyber security professionals tackle an ever-evolving array of challenges. Yet, even this mission-critical field is not immune to economic turbulence. When broader financial markets experience uncertainty—whether through global recessions, regional downturns, or unexpected macro events—the hiring climate can shift, making roles more selective and budgets tighter. For job seekers in cyber security, this can be disconcerting. You might discover that once-abundant vacancies have become scarce, competition for the remaining positions is fiercer, or company priorities pivot away from large-scale expansions toward essential, cost-justified security projects. At the same time, data breaches and cyberattacks don’t pause during economic slowdowns—if anything, they may escalate as bad actors exploit organizational vulnerabilities. This paradox means that while the market feels tough, demand for cyber security expertise remains robust. In this article, we’ll look at: Why economic uncertainty affects cyber security hiring trends. Strategies for staying competitive, even if the number of open roles shrinks. Methods to highlight your skills, adapt to shifting priorities, and network effectively. Approaches for preserving mental well-being during prolonged searches or uncertain feedback loops. How www.cybersecurityjobs.tech can help you find the ideal security-focused role. By proactively sharpening your skill set, tailoring your professional profile, and engaging with a focused community, you can secure a rewarding cyber security job—even when the broader market feels volatile.

How to Achieve Work-Life Balance in Cyber Security Jobs: Realistic Strategies and Mental Health Tips

Cyber security is one of today’s most vital and rapidly expanding sectors. As data breaches, ransomware, and other cyber threats continue to evolve, the demand for skilled professionals is surging across industries—from finance and healthcare to government and e-commerce. Whether you’re a penetration tester, security analyst, or threat intelligence expert, you play a key role in safeguarding digital infrastructure and sensitive information. This high-stakes environment, however, often comes with intense pressure. Long hours, constant vigilance, and an ever-changing threat landscape can make it challenging to find time for personal well-being. Many cyber security specialists report difficulty striking a sustainable work-life balance, unsure if it’s even possible in a field that never truly sleeps. Yet, as concerns about mental health and burnout become more pressing, professionals and employers alike are seeking better ways to combine career advancement with a fulfilling personal life. In this comprehensive article, we’ll explore how to achieve a work-life balance in cyber security. You’ll discover strategies for managing 24/7 threat alerts, the importance of realistic expectations, ways to maintain mental health in high-intensity roles, and tips for setting boundaries without compromising your professional growth. Whether you’re new to this dynamic arena or already an established specialist, these insights can help you thrive personally and professionally in the fast-paced world of cyber security.

Transitioning from Academia to the Cyber Security Industry: How Researchers Can Harness Their Skills to Protect Commercial Environments

Cyber security has become a mission-critical field in an era where data breaches, ransomware attacks, and sophisticated hacking techniques threaten businesses and public institutions alike. As digital transformation touches nearly every facet of modern life, the need for highly skilled individuals capable of defending systems and networks continues to grow. For PhDs and academic researchers with expertise in areas like cryptography, network security, or threat intelligence, this presents an exciting opportunity to deploy your analytical prowess in a high-impact, fast-paced commercial setting. In this guide we’ll explore how academics can successfully pivot from the research lab to the cyber security industry. Learn how to apply rigorous, theory-driven approaches to real-world challenges, from designing secure software architectures to neutralising advanced persistent threats. By embracing the industry’s urgency and end-to-end mindset, you can transform your scholarly insights into robust, market-facing security solutions that protect companies and users on a global scale.