Security Lead

Stack

Responsibilities

• ▹Own cloud and application security, including AWS security architecture, IAM, network security and secure configuration management
• ▹Improve application security practices: secure coding guidance, threat modeling support and automated security testing in the SDLC
• ▹Lead the incident response program, including playbooks, on-call readiness, threat detection and response coordination
• ▹Manage vulnerability management processes together with engineering teams
• ▹Maintain and evolve security tooling, including monitoring, logging, SIEM/alerting and secrets management
• ▹Contribute to the unified control framework for ISO 27001 and SOC 2
• ▹Own corporate and IT security, including endpoint management (e.g. MDM), identity and access management, and oversight of the external IT provider
• ▹Lead security reviews by customers as a trusted partner to enterprise clients
• ▹Embed security considerations into design and architectural decisions

Requirements

• ▹A degree in computer science or engineering, or equivalent hands-on experience in technical roles
• ▹5+ years of experience in security engineering, cloud security, application security or similar technical security roles
• ▹Hands-on expertise with AWS security architecture, identity and access management, network security and modern DevOps practices
• ▹Experience implementing or supporting secure development lifecycle (SDLC) practices
• ▹Strong understanding of modern authentication, authorization, secrets management and infrastructure-as-code security
• ▹Experience handling security incidents, vulnerability management or threat detection
• ▹Experience with large-enterprise security and compliance expectations, including vendor due-diligence processes
• ▹Experience maintaining compliance programs such as ISO 27001 or SOC 2
• ▹Ability to build relationships across engineering and influence secure design decisions
• ▹Pragmatic, solution-oriented mindset balancing security, usability and speed
• ▹Experience mentoring team members

Nice to have

• ▹Experience acting as a Data Protection Officer or supporting regulation such as GDPR
• ▹Experience leading and developing teams and scaling a security function in a fast-growing environment
• ▹Understanding of pharma deployment environments and common R&D platforms (e.g. Schrödinger Live Design, Benchling)
• ▹Experience in B2B SaaS, particularly with AI-powered or data-intensive products
• ▹Experience working directly with external partners, customers and users in fast-moving, high-stakes projects

Soft skills

What we offer

• ▹Industry-competitive compensation, including early-stage virtual share options
• ▹Remote-first working: work where you work best
• ▹Wellbeing budget, mental health support, work-from-home budget, co-working stipend and learning budget
• ▹Generous holiday allowance
• ▹Office days at the Berlin HQ or another European location (3x per year)
• ▹A high-caliber, execution-focused team

About the company

Apheris is building the future of how AI is applied in pharmaceutical R&D. It hosts the industry's largest federated data networks for drug discovery AI (co-folding, ADMET, antibody developability), so models are trained on proprietary industry data without the data leaving each partner's environment.