Senior Cyber Security Engineer
What if your next security design helped protect the systems that save lives? Do you want to have a real impact on the cyber resilience of a global biopharmaceutical leader?
In our IT Risk Management & Security division, we don't do dull routine – we protect the critical infrastructure that enables the development of future medicines. Right now, we are looking for an experienced partner to join us and take our identity security and PAM (Privileged Access Management) capabilities to the next level. Your work on key initiatives like securing global manufacturing sites will have an immediate impact and help us tackle future technology challenges, such as managing access for AI agents. You will become a key expert in our agile, highly collaborative global team (US, Czech Republic, India), where every voice matters.
What you will do:
•Build from scratch: Lead the complete deployment, configuration, and launch of our brand-new secrets management platform.
•Enhance enterprise security: Manage and develop our established privileged access and secrets management systems (on-premises and cloud).
•Steer the direction: Partner with application, infrastructure, and security teams worldwide to eliminate risks and implement modern standards.
•Drive innovation: Integrate security tools with automation (PowerShell) and modern CI/CD pipelines.
•Shape the future of security: Help us define the guardrails for secure governance of AI agents within our environment.
•Work in a human-centric team: No micromanagement. Enjoy agile collaboration and regular connection with international colleagues in the US, Prague, and Hyderabad.
What you should have:
•Background in IT security: At least 5 years of experience in identity management (IAM/PAM), or infrastructure security within an enterprise environment.
•Technical foundation you can rely on: Hands-on experience administering privileged access tools (e.g., Secret Server) and an understanding of concepts like password rotation, vaulting, secrets management, and least-privilege access.
•Modern Tech & Cloud Experience: Practical knowledge of HashiCorp Vault, Active Directory, or Microsoft Entra ID, coupled with experience securing access within public cloud environments like AWS, MS Azure, or Google Cloud.
•Drive to automate: Ability to connect security systems with automation (e.g., via PowerShell scripting).
•English for everyday use: Ability to communicate and collaborate with colleagues in a global team.
What we offer:
•Exciting work in a great team, global projects, international environment
•Opportunity to learn and grow professionally within the company globally
•Hybrid working model, flexible role pattern
•Competitive salary & incentive pay
•Pension and health insurance contributions
•Internal reward system and referral scheme
•5 weeks annual leave, 5 sick days, 15 days of certified sick leave paid above statutory requirements annually, 40 paid hours annually for volunteering activities, 12 weeks of parental contribution
•Cafeteria for tax free benefits according to your choice (meal vouchers, sport, culture, health, travel, etc.), Multisport Card
•Vodafone, Raiffeisen Bank, Foodora, and discount programs
•Up-to-date laptop and iPhone
•Parking in the garage, showers, refreshments, massage chairs, library, music corner
Required Skills:
Design Applications, Information Security, Security Operations, SLA Management, Software Development, Software Development Life Cycle (SDLC), System Designs, Technical Advice, Vulnerability Scanning
