Senior Engineer, Cyber Security

Senior Engineer, Cyber Security – Full-time – Basildon – Hybrid – 3 days working from the office and 2 days working from home

About the Company

Pharmanovia is a dynamic, fast-growing international pharmaceutical company with a portfolio of over 20 brands across more than 160 markets. Our mission is to improve patient health globally by revitalising niche, tried-and-trusted medicines. Since its inception in 2013, Pharmanovia has grown consistently year on year, focusing on delivering high-quality branded prescription medicines to patients, prescribers and healthcare providers worldwide. Our people are at the heart of our business, with more than 300 employees representing 29 nationalities across our international offices. We are an agile, committed and innovative global speciality pharma business and a preferred partner for innovator pharma companies, helping to transform the lifecycle management of iconic medicines. Our therapeutic areas include Cardiovascular, Oncology, Endocrinology and Neurology.

About the Role

We are looking for an experienced Senior Engineer, Cyber Security to join our global IT team and take a hands-on role in protecting Pharmanovia’s technology estate. This is a key technical position responsible for the day-to-day operation, monitoring, and continuous improvement of our global cybersecurity controls across a Microsoft-centric technology environment. Working within a regulated GxP environment, you will be responsible for operating and optimising key security platforms including Microsoft Sentinel, Microsoft Defender, Microsoft Purview, Entra ID, Darktrace and Cato.

As Pharmanovia’s dedicated hands-on cyber security specialist, you will play a central role in security operations, incident response, vulnerability management, risk remediation and security assurance. You will also work closely with IT, infrastructure, applications and project teams to ensure security is embedded into technology initiatives from the outset. This is an ideal opportunity for a technically strong cyber security professional who enjoys ownership, problem-solving and working across a growing international organisation.

Responsibilities

• Own the day-to-day operation of Pharmanovia’s cybersecurity environment, ensuring security controls remain effective, operational, and appropriately configured.
• Administer, monitor and optimise key security technologies, including Microsoft Sentinel, Defender, Purview, Entra ID, Darktrace and Cato.
• Monitor and investigate security events, alerts and potential threats, identifying risks and taking appropriate action to protect the organisation.
• Lead security incident response activities, coordinating investigation, containment, remediation and recovery with internal IT teams and external security partners.
• Work closely with the external SOC/MSSP to ensure effective monitoring, escalation, investigation, and resolution of security incidents.
• Own vulnerability management and remediation, ensuring vulnerabilities, penetration test findings, and security weaknesses are prioritised, tracked, and closed.
• Maintain and manage the cybersecurity risk register, ensuring risks are accurately recorded, assessed, monitored, and reported through to resolution.
• Conduct regular security assurance activities to identify opportunities to strengthen the organisation’s overall security posture.
• Provide clear reporting on cybersecurity risks, incidents, vulnerabilities, and remediation progress to IT leadership and relevant stakeholders.
• Support compliance, audit, and GxP security requirements, ensuring that appropriate evidence, controls, and documentation are maintained.
• Provide cybersecurity expertise across IT infrastructure, applications, and business projects, ensuring security requirements are considered from the earliest stages of design.
• Embed security-by-design principles into new technology solutions, IT projects, transformation programmes and operational changes.
• Develop and improve security monitoring, detection and threat-hunting capabilities, using tools such as Sentinel and KQL.
• Develop and maintain security automation, including Sentinel playbooks, Logic Apps and Power Automate where appropriate.
• Identify and proactively close security gaps, recommending practical improvements that strengthen resilience and reduce cyber risk.
• Support the development and implementation of security standards, policies, and procedures, ensuring alignment with recognised industry best practices.
• Work collaboratively with IT, infrastructure, applications and business stakeholders, translating technical security risks into clear business implications and practical actions.

Qualifications

• Strong hands-on experience operating and administering enterprise cyber security technologies in a live production environment.
• Proven experience managing cybersecurity incidents from initial detection through investigation, containment, remediation, and closure.
• Hands-on experience with Microsoft Sentinel (SIEM), including monitoring, detection tuning and administration.
• Strong hands-on experience with Microsoft Defender across endpoint, XDR and/or cloud security environments.
• Strong knowledge and practical experience of Entra ID security, including Conditional Access and privileged access management.
• Proven experience owning vulnerability management and driving penetration-test findings through to remediation and closure.
• Experience working with an external SOC, MSSP or managed security service provider.
• Experience maintaining a cybersecurity risk register and reporting security risks, incidents, and remediation activities to stakeholders.
• Strong incident response knowledge and understanding of recognised threat frameworks such as MITRE ATT&CK.
• Experience using KQL for threat hunting, security investigation and/or detection engineering.
• Experience working within a pharmaceutical, GxP or similarly regulated environment.
• Good understanding of security standards and recognised cybersecurity best practices such as ISO 27001 and Cyber Essentials.
• Experience applying security and change-control principles within a regulated or controlled environment.
• Experience with Microsoft Purview, particularly Data Loss Prevention (DLP) and sensitivity labelling.
• Experience with security automation, including Sentinel playbooks, Logic Apps and/or Power Automate.
• Experience with Darktrace, particularly email security and user/identity protection.
• Experience with Cato, including IPS, anti-malware/next-generation anti-malware, threat prevention and MDR capabilities.

Pay range and compensation package

We offer a competitive salary plus a bonus and rewards package, including holidays, employee recognition awards, social events, a pension scheme, and hybrid working.

Equal Opportunity Statement

Pharmanovia is an equal-opportunity employer. Pharmanovia does not unlawfully discriminate against employees or applicants for employment based on an individual’s race, colour, religion, creed, sex, sexual orientation, gender identity or expression, national origin, genetic information, age, disability, marital status or any other status protected by applicable law. This policy applies to all terms, conditions, and privileges of employment, including recruitment, hiring, placement, compensation, promotion, discipline and termination. Pharmanovia will make reasonable accommodations for qualified individuals with known disabilities, in accordance with applicable law.

#J-18808-Ljbffr…