The Senior Cybersecurity Engineer is being brought in during an exciting and pivotal time of growth for BC|Platforms. As we partner with organizations looking to rapidly develop effective treatments, improve patient outcomes, and build novel approaches to healthcare; our application and infrastructure footprint grows. As this footprint grows, so does our responsibility to ensure these information systems are secure.

Your role:

In this role, we are looking for someone to partner with our existing Data Privacy and Technical teams; to help create, execute, and iterate upon a comprehensive application and infrastructure security strategy. We are ISO 27001 certified, deal with PHI, and partner with organizations globally, so familiarity with GDPR, HIPAA, and other privacy frameworks are critical.

The Senior Cybersecurity Engineer should be someone who is excited about executing, testing, and iterating on security strategy - everything from patch management to system architecture. The best fit will be someone who is motivated to actively execute in implementation.

This role will be one of responsibility and influence. There is excellent complexity, but also a tremendous opportunity for growth and professional development in a quickly growing company. The Senior Cybersecurity Engineer will report directly to the Head of Technical Operations and be the first member of a dedicated Cybersecurity team.

Your mission as our Senior Cybersecurity Engineer: 

• Lead cloud certification activities, system and network hardening, vulnerability testing, and scanning.
• Work with the Chief Solution Architect and Technical Operations team to design security-focused architecture, providing analysis of the security features; and mapping them to customer requirements.
• Evaluate the organization's existing application and infrastructure security practices; define, standardize, and measure security-related activities, and demonstrate concrete improvements over time.
• Work with deployment and care teams to monitor information systems for security incidents and vulnerabilities. Refine visibility capabilities as well as reporting on incidents, vulnerabilities and trends.
• Respond to information system security incidents, including investigation, countermeasures to, and recovery from computer-based attacks, unauthorized access, and policy breaches.
• Perform tasks like application updates, tools updates, and patching; automating where possible.
• Identify and fill gaps in SOPs and Work Instructions related to application and infrastructure security.

You will succeed in this role considering these key factors and challenges:

• This role is new to the organization, a team member is required who looks forward to crafting the security strategy for a fast-growing company, in a burgeoning market.

• An individual who can take both business needs and security requirements, and synthesize them to create something both secure and practical is ideal.

• The global and cross-functional collaboration will be a core component of this position; concise and clear communication, flexibility, empathy, and the ability to educate are all important.

• We offer a hybrid work environment; team members who thrive are those who have the capacity to organize and prioritize their work according to business needs and are independently driven. 

Desired knowledge, experience, and capabilities for this role:

Formal education and professional experience:

• BA/BS Bachelor's Degree OR 
• Associate's Degree plus five (5) years of related Technology experience OR 
• High School Diploma/GED plus seven (7) years of related Technology experience

Operational experience:

• Five (5) years of cloud computing experience (AWS, Azure, GCP, Openstack).
• Five (5) years of combined experience in network security, infrastructure security, application security, and/or systems security development.
• Knowledge of encryption methods for data at rest and in-transit in a variety of cloud environments.
• Working knowledge of network security concepts and how to implement security features such as next-generation firewalls, IDS/IPS protection, DDOS protection, TLS inspection, etc.
• Experience using and customizing reports generated from CSPM tools such as VMWare Secure State.
• Experience working with and securing Kubernetes environments.
• Familiarity with industry standards, guidelines, and regulatory compliance requirements related to information security such as GDPR, ISO 27001, Cloud Security Alliance, NIST 800-53, PCI DSS, and SOC2.
• Experience with Terraform, Infrastructure as Code, CI/CD PIpelines, and Git

Valuable certifications:

Certifications in CISSP, CISM, CEH, CWSP, GCWN, or Security Certification with any major Cloud Providers (Azure, AWS, GCP).

Additional Information
This position is located in the Technopolis Hub in Espoo, Finland as part of our R&D function. The company operates with a Hybrid Work Model, which consists of both working from the office as well as remotely from the home office where applicable. 

Application
The application deadline is by 10th June 2023. Send us your application via our Career Site. For inquiries regarding the recruitment and application process, please contact recruitment@bcplatforms.com.

What we offer:

Learning & Development
Opportunity to learn from great and talented colleagues on meaningful work content and grow your competencies through BC Academy and BC Associate Programme. BC Platforms is committed to develop its Learning & Development Programme to further it in a continuous path of improvement.

Talented colleagues in great locations
BC Platforms has offices in Zurich, Greater Helsinki, Boston, Singapore and a legal entity in the UK across three continents. Part of our people work also from the home offices from different locations around the globe.

Company Events
We have our bi-annual BC|Days Events which are dedicated to our strategy work having all our people involved. We also host BC|Afterwork events occasionally for developing relationships and a sense of community.

Competitive compensation
We offer a competitive salary and Incentive Programme. When the company reaches its targets, everyone gets to enjoy the success. We emphasize the long-term impact and reward our people for their success on the long-term growth of the company.

Healthcare & Wellbeing
Our people’s health and wellbeing is important to us. We offer private healthcare plans or healthcare insurance plans and travel insurances for all of our employees.

Work-life balance
As much as we are eager to work with our colleagues, customers and other stakeholders, we provide a good work-life balance with flexible hours and paid time off.

Work equipment
We want to offer you a great onboarding also from the equipment point of view. You will receive a laptop, a mobile phone and headphones. In addition, we offer you a variety of tools and lots of learning regarding our state-of-the-art software solutions.

Free snacks and beverages

Who we are

BC Platforms is a global leader in providing a powerful data and technology platform for personalized medicine and drug development, accelerating the translation of insights into clinical practice.

BC Platforms operates the Global Data Partner Network BCRQUEST.com, which provides access and analytics on genomic and clinical cohort data for drug developers currently providing access to over 33m subjects across five continents.

Our technology drives the infinite loop between personalized care and research discoveries, leveraging latest science, deep technical expertise, strategic partnerships, and harmonized, diverse data collections.

Our high performing platforms enable high throughput genomic data production, flexible data integration, secure data management, efficient analysis and interpretation of molecular and clinical information.

Founded in 1997 from an MIT Whitehead project spinoff, the Company has a strong scientific heritage underpinned by over 20 years of working in close collaboration with a network of leading researchers, developers, manufacturers and vendors. BC Platforms has global operations with its headquarters in Zurich, Switzerland, research and development in Espoo, Finland, and sales and marketing in Boston, USA, London, UK and Singapore. For more information, please visit www.bcplatforms.com.