Department:101180 IT-G&A
Location:San Diego, USA- Remote
Be a part of a global team that is inspired to make a difference in the lives of people living with rare disease.
At Travere Therapeutics, we recognize that our exceptional employees are vital to our success. We are a dedicated team focused on meeting the unique needs of rare patients.Our work is rewarding - both professionally and personally - because we are making a difference. We are passionate about what we do.
We are seeking talented individuals who will thrive in our collaborative, diverse, fast-paced environment and share in our mission - to identify, develop and deliver life-changing therapies to people living with rare disease. We stick by our values centered on patients, courage, community, and collaboration to pursue our vision of becoming a leading biopharmaceutical company dedicated to the delivery of innovation and hope to patients in the global rare disease community.
At Travere Therapeutics, we are in rare for life. We continue to courageously forge new paths as we move toward a common goal of elevating science and service for rare patients.
Position Summary:
We are seeking a Senior, hands-on Cybersecurity Engineer with deep technical expertise and a strategic mindset to help lead and advance Travere's security program.
In this role, you will shape and enforce cybersecurity practices, oversee daily security operations, and drive continuous improvement of our managed SOC services. You will play a critical role in managing core security platforms, leading incident investigations, guiding risk assessments, and ensuring audit and compliance readiness, while also managing and driving progress on the company's NIST roadmap.
Responsibilities:
Support and enhance the company's cybersecurity program in alignment with NIST CSF 2.0 and related frameworks (e.g., NIST SP 800-53, 800-171).
Manages Travere's NIST roadmap, driving progress and ensuring it remains current.
Oversees Travere's SOC services, including:
Managing escalations, tuning detection logic.
Investigating security alerts and incidents.
Enhancing SOC workflows and playbooks.
Operate and maintain key security tools:
EDR, SIEM, firewalls, vulnerability scanners, etc.
Ensure integration and effectiveness across platforms.
Administer identity and access management using Okta and Microsoft Entra ID (Azure AD):
Enforce MFA, SSO, and lifecycle access controls.
Oversees the integration and management for any new identity and access management solutions within the infrastructure.
Manage Travere's Privileged Access Management (PAM) platform - Delinea "Secret Server":
Onboarding privileged accounts, policy enforcement, and ongoing maintenance.
Perform vulnerability assessments and support remediation efforts with IT and cloud teams.
Document incidents, systems, tooling configurations, and audit evidence.
Support SOX, GxP, data privacy, and other compliance initiatives with technical input and control documentation.
Education/Experience Requirements:
Bachelors degree in related Computer Science discipline. Equivalent combination of education and applicable job experience may be considered.
6-8+ years of hands-on cybersecurity engineering or SOC experience.
CISSP certification required. OSCP, GCIH, or GCIA (or equivalent) preferred.
Prior experience in a regulated industry (i.e. life sciences, pharma, biotech, fintech).
Familiarity with SOX, GxP, ISO 27001, and other security/compliance standards.
Strong command of NIST frameworks and security operations best practices.
Experience with:
Okta, Azure/Entra ID, Delinea "Secret Server", Microsoft Defender, Wiz CNAPP, Cylance/Aurora, Mimecast, Palo Alto.
Operating in hybrid cloud environments (Windows, Linux, AWS, Azure).
Scripting/automation experience with PowerShell, Python, or Bash.
Additional Skills/Experience/Requirements:
The ideal candidate will embody Travere's core values: Courage, Community Spirit, Patient Focus and Teamwork.
Demonstrated ability to develop and mature enterprise security roadmaps.
Experience aligning cybersecurity initiatives with overall business strategy and risk tolerance.
Experience with third-party/vendor risk management in regulated industries.
Proven ability to translate technical risks into business terms for executives and auditors.
Familiarity with emerging technologies such as zero trust, OT/IoT security, and AI/ML applications in cybersecurity.
Experience with Data Security Posture Management (DSPM) or related data discovery/classification tools to ensure visibility and protection of sensitive data across cloud and on-prem environments.
Strong professional experience in a similar role within the pharmaceutical industry, preferred.
Well organized with the ability to multitask, prioritize, and manage shifting responsibilities in a dynamic, cross-functional teamwork environment.
Excellent collaboration skills with strong attention to detail and the ability to multi-task and manage complexity.
Strong interpersonal and organizational skills and excellent verbal and written communication skills are required.
Successful record of creating and managing complex project plans, timelines, budgets, and critical paths.
Ability to adapt to modification and changes to project plans, demonstrating flexibility to implement new strategies and tactics to accommodate these changes.
Ability to travel up to 10% domestic.
All positions have an essential job function to be able to perform face to face work with colleagues and/or onsite in San Diego. No role is expected to be 100% remote.
Total Rewards Offerings:
Travere provides comprehensive total rewards offerings that demonstrate our commitment as a diverse, equitable,... For full info follow application link.
Travere Therapeutics, Inc. is an EEO/AA/Veteran/Disability Employer
