Security Engineer II

Iovance Biotherapeutics, Inc.

. Administer and tune CrowdStrike Falcon prevention policies, host groups, device control, and sensor updates across Windows, macOS, and Linux .

Posted 11/12/2026full-timeRemote • United StatesMid-LevelSenior💰 $125,000 - $140,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in security engineering and cloud security, with a strong focus on administering CrowdStrike Falcon, PAM solutions, and securing AWS and Microsoft 365 environments. Proficient in developing detections, managing incident response, and maintaining compliance with GxP, SOX, and HIPAA standards.

Highest-signal resume keywords

CrowdStrike Falcon EDREnterprise PAM AdministrationAWS SecurityMicrosoft 365 SecuritySIEM Platform Experience

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security EngineeringCloud SecurityDetection DevelopmentScripting in PythonScripting in PowerShellScripting in BashNetworking FundamentalsIdentity ProtocolsVulnerability ManagementIncident Response

Soft Skills

Strong Written CommunicationAudit-Ready Documentation Skills

Tools & Technologies

CrowdStrike FalconFalcon Next-Gen SIEMEnterprise PAM SolutionsMimecastGitHub Advanced SecurityAWS ServicesMicrosoft 365OktaActive DirectoryCI/CD Security

Industry Keywords

GxPSOXHIPAAThreat HuntingPhishing InvestigationBusiness Email CompromiseChange ControlCredential RotationSession RecordingSegregation of Duties

Tech Stack

Tools & technologies

AWSCloudDNSEC2LinuxMacOSPython

About the role

Key responsibilities & impact

Administer and tune CrowdStrike Falcon prevention policies, host groups, device control, and sensor updates across Windows, macOS, and Linux
Onboard and normalize log sources into Falcon Next-Gen SIEM and build detections, dashboards, and Falcon Fusion SOAR workflows
Investigate alerts, conduct threat hunting, and drive containment and remediation
Operate the enterprise PAM platform, including vaulting, credential rotation, session recording, and just-in-time access
Integrate PAM with Okta and Active Directory and support privileged access reviews and segregation-of-duties controls
Administer Mimecast threat protection, DLP, archiving, and continuity policies; maintain SPF, DKIM, and DMARC
Investigate phishing, impersonation, and business email compromise attempts
Secure AWS workloads and services, identify and remediate misconfigurations, enforce least privilege, and review infrastructure-as-code
Harden and monitor Microsoft 365 security controls
Administer GitHub Advanced Security, branch protection, organization policies, and secure GitHub Actions pipelines
Author technical documentation, standards, and runbooks suitable for GxP, SOX, and HIPAA audits and provide audit evidence
Participate in change control, vulnerability and patch management, incident response, and on-call rotation

Requirements

What you’ll need

Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent experience
5+ years of hands-on experience in security engineering or cloud security
Hands-on experience with CrowdStrike Falcon EDR and a SIEM platform, preferably Falcon Next-Gen SIEM (LogScale), including detection development
Experience administering an enterprise PAM solution (e.g., CyberArk, BeyondTrust, Delinea)
Experience with Mimecast or a comparable secure email gateway
Practical experience securing AWS environments (EC2, ECS, ELB, S3, WAF, IAM, VPC)
Hands-on experience securing Microsoft 365, including Entra ID, Conditional Access, Exchange Online, and Purview
Working knowledge of GitHub security features and CI/CD security
Solid foundation in networking, DNS, TLS, and identity protocols (SAML, OIDC, OAuth, LDAP)
Scripting experience in Python, PowerShell, or Bash
Strong written communication and audit-ready documentation skills