Who We Are:
Neurocrine Biosciences is a leading biopharmaceutical company with a simple purpose: to relieve suffering for people with great needs. We are dedicated to discovering, developing and commercializing life-changing treatments for patients with under-addressed neurological, psychiatric, endocrine and immunological disorders. The company's diverse portfolio includes FDA-approved treatments for tardive dyskinesia, chorea associated with Huntington's disease, classic congenital adrenal hyperplasia, hyperphagia in Prader-Willi syndrome, endometriosis* and uterine fibroids*, as well as a robust pipeline including multiple compounds in mid- to late-phase clinical development across our core therapeutic areas. For more than three decades, we have applied our unique insight into neuroscience and the interconnections between brain and body systems to treat complex conditions. We relentlessly pursue medicines to ease the burden of debilitating diseases and disorders, because you deserve brave science. For more information, visit neurocrine.com, and follow the company on LinkedIn, X, Facebook and YouTube. (*in collaboration with AbbVie)
About the Role:
This is a hands-on, automation-driven senior systems security engineering role responsible for planning, implementing, and driving enterprise technology infrastructure security posture and regulatory compliance readiness across Linux, Windows, cloud, on-prem, and hybrid environments. The engineer serves as a senior technical resource for enterprise infrastructure vulnerability management, overseeing the process from initial alert through remediation and closure verification. The role also develops and improves patch automation using scripting, configuration management, and orchestration, while continuously evaluating tools and processes to adapt to changes in the infrastructure and threat landscape. The engineer applies deep systems engineering and enterprise systems administration expertise to plan and execute security patches, and translates Cybersecurity policy requirements into implemented, auditable controls, establishing KPIs to measure and report progress against security risk remediation goals. The engineer also establishes and maintains Standard Operating Procedures (SOPs) and change management controls to ensure infrastructure security changes are consistently documented and traceable. This provides objective evidence for security and access control audits while maintaining continuous organizational audit readiness. This role serves as a key technical resource and liaison between Cybersecurity, IT business partners, Internal Audit, and Compliance/Quality functions, ensuring that security requirements are operationalized consistently and remediation work is tracked to closure with measurable outcomes._
Your Contributions (include, but are not limited to):
Security Automation and Vulnerability Management at Scale
Lead complex infrastructure vulnerability remediation efforts and continuously improve the tools and automation used to detect, remediate, and verify security findings across Linux, Windows, cloud, network, and hybrid infrastructure
Plan and implement security patches across enterprise Linux and Windows server environments, including patch testing, sequencing, rollback planning, and post patch validation
Lead and coordinate the enterprise vulnerability remediation program across cloud (AWS/Azure), on prem, and hybrid infrastructure, prioritizing based on risk severity, exploitability, and business impact
Design and implement a scalable patch management framework across AWS, Azure, and hybrid infrastructure including Linux and Windows servers, network devices, and platform services, reducing reliance on manual, one-off remediation efforts
Apply enterprise systems administration expertise (OS hardening, configuration management, service dependencies) to assess patch impact and minimize disruption to production systems
Partner with Cybersecurity to translate vulnerability scan findings and audit action items into clear, actionable remediation plans with committed timelines and owners
Extend vulnerability management support to the application layer, partnering with Business teams and application owners to identify, prioritize, and drive remediation of application vulnerabilities alongside infrastructure remediation efforts
Administer and enhance the organization’s automation platforms, including AWS Systems Manager (SSM) Patch Manager, and integrate them with other automation and orchestration tools to scale vulnerability detection, patching, remediation tracking, and closure verification across AWS, Azure, and hybrid environments
Develop and maintain KPIs and reporting mechanisms (e.g., patch compliance rate, mean time to remediate, aging of open findings, risk trend over time) to measure and communicate progress of security risk remediation efforts to leadership and governance forums
Coordinate remediation activities across Technology Infrastructure, Network Engineering, Cloud Engineering, and Scientific Systems teams to ensure consistent execution and minimal disruption to operations
Continuously identify opportunities to shift from reactive, one-off patching toward standardized, repeatable, and automated remediation processes
Change Management, SOPs, and Audit Readiness
Establish and maintain security vulnerability management SOPs, work instructions, and documentation standards for infrastructure security changes to ensure consistent, compliant execution across all systems
Implement, maintain and monitor controls designed to ensure infrastructure security changes (network, cloud, compute, storage, identity, and security configuration) are documented, approved, and traceable end to end
Build and maintain a long-term remediation evidence repository (change records, approvals, exceptions, risk acceptance artifacts, testing/validation artifacts, access reviews) that supports objective evidence for internal and external audits
Partner with Quality/Compliance and Cybersecurity to ensure change management and access control processes meet applicable regulatory requirements (e.g., GxP, SOX, data integrity) and industry frameworks
Lead or support periodic access reviews, control self-assessments, and audit response activities, ensuring evidence is complete, current, and readily retrievable
Identify and close gaps between current operational practices and documented SOPs; drive continuous improvement of change and compliance processes as environments evolve
Serve as a key point of contact during internal and external audits related to security and access controls, coordinating evidence gathering and responses across infrastructure teams
Cross-Functional Collaboration and Governance
Serve as a senior technical liaison among Cybersecurity, Enterprise Technology Infrastructure, and IT business partners to translate security and compliance requirements into practical technical controls while supporting clear ownership, accountability, and operational execution
Provide technical input on cybersecurity policies and controls, assessing whether requirements are proportionate to business risk, technically sustainable at scale, and balanced against user experience and operational efficiency. Recommend practical, risk-based alternatives where controls introduce unnecessary friction or complexity
Participate in architecture and change advisory reviews to ensure security and compliance requirements are addressed early in design rather than retrofitted after implementation
Support the definition of RACI models and outcome-based security requirements so that policy ownership (Cyber) and implementation ownership (Infrastructure) remain clear
Contribute to the enterprise system security control baseline, including closing or formally risk accepting legacy assessment action items
Mentor and provide guidance to engineers on secure configuration standards, patching best practices, and documentation discipline
Other duties as assigned
Requirements:
Bachelor’s degree in computer science, Information Technology, Systems Engineering, or a related technical field and 4+ years of relevant systems engineering or systems administration experience, OR
Master's degree in computer science/engineering or a related technical field and 2+ years of experience as listed above, OR
8+ years of a relevant combination of technical education, certifications, training and systems engineering experience
Relevant experience should include enterprise Linux and/or Windows server environments and security patching, vulnerability remediation, automation, or IT compliance. Demonstrated hands-on experience administering and patching enterprise systems and developing automation for patch deployment or remediation (scripting or configuration management tooling) is required
Relevant certifications such as CISSP, CISM, CompTIA Security+, RHCE, Microsoft Certified: Windows Server, or ITIL Foundation are preferred but not required
Hands-on technical expertise planning and implementing security patches in both Linux and Windows enterprise server environments, including patch testing, staging, deployment sequencing, and rollback procedures
Demonstrated experience working as a Systems Engineer or Systems Administrator, with strong working knowledge of enterprise system administration: OS configuration, hardening, service and dependency management, and performance/stability considerations during patch cycles
Strong understanding of the vulnerability management lifecycle: identification, prioritization, remediation, and verification across AWS, Azure, and hybrid infrastructure
Working knowledge of application-layer vulnerability management sufficient to partner effectively with Business teams and application owners on remediation prioritization and timelines, complementing infrastructure-focused remediation work
Experience with cloud and hybrid patch/automation tooling particularly AWS Systems Manager (SSM) Patch Manager and Azure equivalents alongside Windows (e.g., WSUS, SCCM/Intune) and Linux (e.g., package management, Ansible, Satellite/Landscape or equivalent) tooling and network devices
Demonstrated experience administering and continuously improving automation platforms such as AWS Systems Manager (SSM) Patch Manager integrated with other automation and orchestration tools (scripting in Python/Bash/PowerShell, configuration management tools) to scale vulnerability management, patching, and remediation across AWS, Azure, and hybrid server fleets
Working knowledge of change management frameworks (ITIL or similar) and experience operating within ITSM platforms such as ServiceNow
Familiarity with regulatory and compliance frameworks relevant to a regulated environment (e.g., GxP, SOX, data integrity requirements, 21 CFR Part 11 concepts) and their translation into technical and procedural controls
Experience developing SOPs, work instructions, and audit-ready documentation for technology operations
Understanding of identity and access management principles, access certification processes, and least privilege concepts
Familiarity with cloud and network security tooling (e.g., Cisco Catalyst Center, vulnerability scanners, cloud security posture management tools)
Ability to define measurable KPIs and turn remediation data into clear progress reporting for technical and leadership audiences
Experience supporting or leading audit response activities, including evidence collection and remediation tracking
Strong organizational and documentation discipline, with attention to detail and consistency
Strong written communication skills for SOPs, audit evidence, and leadership reporting
Ability to work cross functionally across Cybersecurity, Infrastructure, Network, Cloud, and Compliance/Quality teams
Analytical and problem-solving skills to prioritize remediation work based on risk and business impact
Comfortable operating in a fast paced, growing, regulated environment with evolving priorities
Project management skills to track multi team remediation and documentation efforts to closure
#LI-CL1
Neurocrine Biosciences is an EEO/Disability/Vets employer.
We are committed to building a workplace of belonging, respect, and empowerment, and we recognize there are a variety of ways to meet our requirements. We are looking for the best candidate for the job and encourage you to apply even if your experience or qualifications don’t line up to exactly what we have outlined in the job description.
_
The annual base salary we reasonably expect to pay is $103,300.00-$141,000.00. Individual pay decisions depend on various factors, such as primary work location, complexity and responsibility of role, job duties/requirements, and relevant experience and skills. In addition, this position offers an annual bonus with a target of 20% of the earned base salary and eligibility to participate in our equity based long term incentive program. Benefits offered include a retirement savings plan (with company match), paid vacation, holiday and personal days, paid caregiver/parental and medical leave, and health benefits to include medical, prescription drug, dental and vision coverage in accordance with the terms and conditions of the applicable plans.
