Senior Associate, Information Security Operations

At Insmed, every moment and every patient counts - and so does every person who joins in. As a global biopharmaceutical company dedicated to transforming the lives of patients with serious and rare diseases, you'll be part of a community that prioritizes the human experience, celebrates curiosity, and values every person's contributions to meaningful progress. That commitment has earned us recognition as Science magazine's No. 1 Top Employer for five consecutive years, certification as a Great Place to Work® in the U.S., and a place on The Sunday Times Best Places to Work list in the UK.

For patients, for each other, and for the future of science, we're in. Are you?

About the Role:
The Senior Associate, Cybersecurity will be responsible for implementing and maintaining advanced security measures to protect organizational assets. You must have expertise in various Cybersecurity disciplines including but not limited to network security, endpoint security, NIST Cybersecurity Framework, Zero Trust Architecture, VPN technologies, vulnerability management, incident response, and Security Operations Center (SOC) operations.

What You'll Do:

In this role, you'll have the opportunity to plan, implement, manage, monitor, and upgrade security measures to protect the organization's data, systems, and networks

• SOC Operations - Monitor SIEM dashboards, analyze alerts, and develop detection content aligned with MITRE ATT&CK techniques.
• Framework Compliance - Apply NIST CSF principles to assess, design, and improve security posture across all domains.
• Zero Trust Implementation - Enforce identity-based access controls and micro-segmentation strategies to minimize attack surfaces.

You'll also:

• Coordinate with vendor technical support for complex issues and develop plans and strategies for system upgrades.
• Assess security advisories and software vulnerabilities and develop mitigation plans. Conduct regular scans, prioritize remediation, and track risk mitigation.
• Consult with business teams regarding threat mitigation best practices in technical areas such as Perimeter Security, CASB, Application Security, Core Systems, EDR, Cloud, and SIEM.
• Implement and manage network security tools including firewalls, VPNs, IPS/IDS, and web proxies.
• Manage VPN tunnels and secure remote access solutions for distributed teams.
• Monitor network traffic, analyze potential security threats, and respond/remediate:
  
  • Network & Endpoint Security - Configure and monitor firewalls, IDS/IPS, and endpoint protection tools to safeguard enterprise infrastructure.
  • Incident Response - Act as a key member of the Security Incident Response Team (SIRT), handling escalations and coordinating with MSSPs and internal teams.
• Develop and maintain support and user documentation and processes.
• Identify and implement automation opportunities for laborious and/or repetitive processes.
• Provide guidance and training to team members and other staff on security best practices.

Who You Are:

You have a minimum of a Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field.

You are or you have:

• 5+ years of experience in cybersecurity with hands-on experience in security operations, incident response, and security tools.
• Strong understanding of network protocols, security frameworks, identity and access management (IAM), and system administration.
• Expert level understanding of perimeter security controls, endpoint controls, and cloud environment controls.
• Experience with network infrastructure including switching, routing, VPN technologies, and wireless networks.
• Hands on proficiency in using security tools like SIEM systems, vulnerability scanning tools, EDR, firewalls, antivirus solutions, and DLP.
• Knowledge of operating systems like Windows and UNIX.
• Basic scripting skills in languages such as PowerShell, Bash, or Python.
• Strong written and verbal communication skills with the ability to tailor to both technical and non-technical audiences.
• Awareness of cybersecurity trends and emerging threats.
• Firewall management and configuration experience.
• Cloud security (AWS, Azure) experience.
• IPS/IDS implementation and management experience.
• Incident response and remediation experience.

This position is required to work weekends and nights as necessary to ensure network availability and to support after regular business hours deployment of new systems, patches, fixes, and/or other enhancements.

Preferred Qualification:

• Certifications - CISSP, CISM, or equivalent; Network security certifications (e.g. Palo Alto, Cisco), SOC related certifications (e.g. Security+).

#LI-EG1

#hybrid

Pay Range:
$113,000.00-143,500.00 Annual

Life at Insmed

At Insmed, you'll find a culture as human as our mission-intentionally designed for the people behind it. You deserve a workplace that reflects the same care you bring to your work each day, with support for how you work, how you grow, and how you show up for patients, your team, and yourself.

Highlights of our U.S. offerings include:

• Comprehensive medical, dental, and vision coverage and mental health support, annual wellbeing reimbursement, and access to our Employee Assistance Program (EAP)
• Generous paid time off policies, fertility and family-forming benefits, caregiver support, and flexible work schedules with purposeful in-person collaboration
• 401(k) plan with a competitive company match, annual equity awards, and participation in our Employee Stock Purchase Plan (ESPP), and company-paid life and disability insurance
• Company Learning Institute providing access to LinkedIn Learning, skill building workshops, leadership programs, mentorship connections, and networking opportunities
• Employee resource groups, service and recognition programs, and meaningful opportunities to connect, volunteer, and give back

Eligibility for specific programs may vary and is subject to the terms and conditions of each plan.

Current Insmed Employees: Please apply via the Jobs Hub in Workday.

Insmed Incorporated is an Equal Opportunity employer. We do not discriminate in hiring on the basis of physical or mental disability, protected veteran status, or any other characteristic protected by federal, state, or local law. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law.

Unsolicited resumes from agencies should not be forwarded to Insmed. Insmed will not be responsible for any fees arising from the use of resumes through this source. Insmed will only pay a fee to agencies if a formal agreement between Insmed and the agency has been established. The Human Resources department is responsible for all recruitment activities; please contact us directly to be considered for a formal agreement.

Insmed is committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. To request reasonable accommodation to participate in the job application or interview process, please contact us by email at [email protected] and let us know the nature of your request and your contact information. Requests for accommodation will be considered on a case-by-case basis. Please note that only inquiries concerning a request for reasonable accommodation will be responded to from this email address.

Applications are accepted for 5 calendar days from the date posted or until the position is filled.