Security Engineer - OperationsLondon, Lausanne
We are here to advance human health, by reimagining drug discovery with the power and pace of artificial intelligence.
The future is coming. A future enabled and enriched by the incredible power of machine learning. A future in which diseases are curtailed or cured by better and faster drug discovery.
Come and be part of an interdisciplinary team driving groundbreaking innovation and play a meaningful role in contributing towards us achieving our ambitious goals, while being a part of an inspiring and collaborative culture.
About Iso
Isomorphic Labs (IsoLabs) was founded in 2021 and is led by Sir Demis Hassabis. Our aim is to usher in a new era of biomedical breakthroughs and find cures for some of humanity’s devastating diseases.
We have built a world-leading drug design engine comprising foundational AI models that are capable of working across multiple therapeutic areas and drug modalities. The company is continually innovating on model architecture and developing cutting-edge capabilities to advance rational drug design.
Your impact
As a Security Engineer - Operations, you will be at the forefront of safeguarding Isomorphic Labs' systems and operations. Your responsibilities will span both operational security and strategic improvements:
On the operational side, you will play a key role in managing security alerts, responding to incidents, and mitigating third-party risks to keep the organisation secure. You will help ensure compliance with security policies, conduct regular security health checks, and work closely with cross-functional teams to resolve security issues efficiently.
Beyond day-to-day operations, you will drive improvements by refining security workflows, optimising automation, and enhancing vendor risk management processes. Your contributions will directly strengthen our security posture, allowing teams across the company to work with confidence in a resilient and well-protected environment.
What you will do
- Collaborate with the ML, Tech and Drug Discovery teams to integrate security best practices into daily operations.
- Actively engage in security incident management by supporting containment, remediation, forensic investigation, and root cause analysis.
- Conduct vendor security assessments, evaluate third-party risk exposure, and perform periodic security audits to ensure compliance.
- Implement and continuously refine security operational procedures to enhance efficiency and ensure adherence to best practices.
- Perform risk assessment and vulnerability management activities, coordinating with relevant teams to ensure timely remediation of security findings.
- Investigate alerts from security monitoring platforms, ensuring efficient response, escalation, and resolution of potential threats.
- Conduct periodic log reviews, health checks and compliance audits, proactively identifying and addressing security gaps.
- Contribute to security awareness initiatives, ensuring employees and teams adhere to security policies and best practices.
- Document and report security metrics, providing insights into security posture and operational effectiveness.
- Support internal audits and regulatory compliance efforts by maintaining accurate security records and responding to information requests.
Skills and qualifications
- Strong IT and cybersecurity technical knowledge, including experience with major cloud platforms.
- Practical understanding of security operations, including incident response, vulnerability management, and security monitoring.
- Hands-on experience with security tools such as SIEM, vulnerability scanners, or endpoint protection solutions.
- Understanding of risk management methodologies and frameworks.
- Excellent communication and interpersonal skills, with the ability to explain complex security concepts to diverse audiences.
- Experience conducting security reviews of third-party vendors and managing supply chain risks.
- Strong analytical skills, a keen intellectual curiosity, and the ability to develop creative solutions.
- Results-oriented with strong attention to detail, capable of investigating and resolving security issues efficiently.
Nice to have:
- Experience with ML-centric organisations and/or the BioTech and Pharma industries.
- Familiarity with the unique challenges of a fast-paced, technology-driven environment.
- Proficiency in scripting or automation tools to enhance security operations efficiency.
- Experience using security reporting and compliance tracking tools to monitor and enforce security policies.
- Understanding of both common and industry-specific security frameworks (e.g., ISO/IEC 27001, GDPR, HITRUST).
- Experience protecting sensitive and regulated data.
Culture and values
We are guided by our shared values. It's not about finding people who think and act in the same way. These values help to guide our work and will continue to strengthen it.
Thoughtfulis about curiosity, creativity and care. It is about good people doing good, rigorous and future-making science every single day.
Braveis about fearlessness, but it’s also about initiative and integrity. The scale of the challenge demands nothing less.
Determinedis the way we pursue our goal. It’s a confidence in our hypothesis, as well as the urgency and agility needed to deliver on it. Because disease won’t wait, so neither should we.
Togetheris about connection, collaboration across fields and catalytic relationships. It’s knowing that transformation is a group project, and remembering that what we’re doing will have a real impact on real people everywhere.
Creating an extraordinary company
We believe that to be successful we need a team with a range of skills and talents. We're building an environment where collaboration is fundamental, learning is shared and every employee feels supported and able to thrive. We value unique experiences, knowledge, backgrounds, and perspectives, and harness these qualities to create extraordinary impact.
We are committed to equal employment opportunities regardless of sex, race, religion or belief, ethnic or national origin, disability, age, citizenship, marital, domestic or civil partnership status, sexual orientation, gender identity, pregnancy or related condition (including breastfeeding) or any other basis protected by applicable law.
It’s hugely important for us to share knowledge and build strong relationships with each other, and we find it easier to do this if we spend time together in person. This is why we follow a hybrid model, andwould require you to be able to come into the office 3 days a week(currently Tuesday, Wednesday, and one other day depending on which team you’re in).
#J-18808-Ljbffr
