Security Engineer (Corporate Security) in London

Isomorphic Labs is applying frontier AI to help unlock deeper scientific insights, faster breakthroughs, and life-changing medicines with an ambition to solve all disease. The future is coming. A future enabled and enriched by the incredible power of machine learning. A future in which diseases are curtailed or cured starting with better and faster drug discovery. Come and be part of an interdisciplinary team driving groundbreaking innovation and play a meaningful role in contributing towards us achieving our ambitious goals, while being a part of an inspiring and collaborative culture.

About Iso

Isomorphic Labs (IsoLabs) was launched in 2021 to advance human health by building on and beyond the Nobel-winning AlphaFold system. Since then, our interdisciplinary team of drug discovery experts and machine learning specialists has built powerful new predictive and generative AI models that accelerate scientific discovery at digital speed. Our name comes from the belief that there is an underlying symmetry between biology and information science. By harnessing AI’s powerful capabilities, we can use it to model complex biological phenomena to help design novel molecules, anticipate how drugs will perform and develop innovative medicines to treat and cure some of the world’s most devastating diseases. We have built a world-leading drug design engine comprising AI models that are capable of working across multiple therapeutic areas and drug modalities. We are continually innovating on model architecture and developing cutting-edge capabilities to advance rational drug design. Every day, and with each new breakthrough, we’re getting closer to the promise of digital biology, and achieving our ambitious mission to one day solve all disease with the help of AI.

Your impact

As a Security Engineer (Corporate Security) you will play a pivotal role in creating and maintaining a resilient, user-friendly and scalable corporate security environment at Isomorphic Labs. Operating with a proactive, service-minded approach and a strong bias for AI and automation, you will safeguard our workforce, identity systems, and sensitive data. In this unique and polyvalent role, you will implement and maintain pragmatic corporate security controls across a wide range of domains such as IAM, DLP, corporate/external applications, and data governance. You will participate in detection and incident response and develop long-lasting measures to improve our corporate security posture. Beyond technical controls, you will also build scalable and secure operational processes across a wide range of domains such as data transfer or systems integration that will materially impact IsoLabs’ mission. You will directly support AI/medical researchers on security topics and will ensure our cross-functional teams can innovate rapidly, securely, and with total confidence.

What you will do

• Corporate Identity & Access Management (IAM): Design, optimize, and support corporate IAM structures, including group architectures, identity system integration, and streamlined employee onboarding/offboarding workflows.
• Corporate Security Controls: Audit corporate systems security and deploy/maintain a wide range of security tools (e.g., logging, monitoring & DLP, data labeling, AI agents).
• Data Governance: Collaborating with Corp Engineering, enhance data governance and security within corporate systems (Google Workspace, Confluence, Jira, Slack, etc.) by gathering user needs and co-developing scalable operating models, appropriate configurations, and SOPs.
• Incident Response & Alert Triage: Partner closely with Detection & Response security engineers to improve and triage corporate security alerts, support incident response efforts when issues arise and address Google’s vulnerabilities and bugs.
• Security Awareness: Promote corporate security rules, support security awareness training and run social engineering exercises.
• Workplace Security: Collaborate with Workplace and Tech teams to ensure the security of physical systems (badges, lab workstations) and offices.
• Security of Operations & Processes: Translate key user needs and security compliance requirements into clear operational processes—such as establishing workflows for onboarding new tools, setting up data transfers and external system integrations.
• Third-Party Risk Management (TPRM): Execute standardized vendor and software audits, improve SaaS Security Posture Management (SSPM) through tools, and address third-party integrations and supply-chain safety risks.
• Automation & AI Integration: Leverage AI tools and agentic workflows to automate routine security tasks, optimize triage, and streamline operations.
• User Enablement: Act as a positive, proactive point of contact for internal teams, delivering user-oriented security solutions that reduce friction while upholding high security standards.

Skills and qualifications

Essential:

• Fluency in navigating complex multi-org corporate systems’ workflows and processes.
• Experience with Atlassian’s and/or Google’s tech stacks.
• Proficiency in collecting user needs and business requirements, turning high-level guidance into efficient SOPs, policies, and guidelines documents.
• Strong foundation in Corporate Systems Security and IAM, including hands-on experience with SSO, user lifecycle management, and directory/group structures.
• Proficiency in basic Python, Go, or PowerShell to interface with REST APIs across SaaS ecosystems (Slack, Google Workspace, Okta).
• Knowledge of SaaS Security Posture Management (SSPM), and ideally, experience using tools like AppOmni, Adaptive Shield, or native SaaS log analysis to spot misconfigurations.
• Experience implementing Data Loss Prevention (DLP) corporate controls, data classification/labeling, and corporate data governance frameworks.
• Practical experience establishing or executing standardized vendor technical security assessments.
• Background in supporting security incident response and handling daily security alert triage.
• A strong bias for automation and an eagerness to leverage AI tools or agentic scanning mechanisms within corporate security workflows.
• Proactive, positive, and highly user-oriented mindset with exceptional communication skills to collaborate with technical and non-technical stakeholders alike.

Nice to have:

• Experience in high-growth tech environments, BioTech, ML-centric companies, or the pharmaceutical industry.
• Familiarity with OWASP Top 10 for LLMs, prompt injection prevention, and secure integration of internal AI assistants.
• Hands-on experience building or integrating AI-driven automation, agentic workflows, or custom scripts for security operations.
• Understanding of security patterns for Electronic Lab Notebooks (ELNs), Laboratory Information Management Systems (LIMS), or High-Performance Computing (HPC) environments.
• Familiarity with GitHub Enterprise security settings, secret scanning, and developer environment hardening.
• Familiarity with common data protection regulations and security frameworks (e.g., GDPR, ISO 27001).
• Relevant industry certifications (e.g., Security+, CISSP, CISA, GSEC).

Culture and values

We are guided by our shared values. It's not about finding people who think and act in the same way. These values help to guide our work and will continue to strengthen it.

• Thoughtful: Thoughtful at Iso is about curiosity, creativity and care. It is about good people doing good, rigorous and future-making science every single day.
• Brave: Brave at Iso is about fearlessness, but it’s also about initiative and integrity. The scale of the challenge demands nothing less.
• Determined: Determined at Iso is the way we pursue our goal. It’s a confidence in our hypothesis, as well as the urgency and agility needed to deliver on it. Because disease won’t wait, so neither should we.
• Together: Together at Iso is about connection, collaboration across fields and catalytic relationships. It’s knowing that transformation is a group project, and remembering that what we’re doing will have a real impact on real people everywhere.

Creating an extraordinary company

We believe that to be successful we need a team with a range of skills and talents. We're building an environment where collaboration is fundamental, learning is shared and every employee feels supported and able to thrive. We value unique experiences, knowledge, backgrounds, and perspectives, and harness these qualities to create extraordinary impact. We are committed to equal employment opportunities regardless of sex, race, religion or belief, ethnic or national origin, disability, age, citizenship, marital, domestic or civil partnership status, sexual orientation, gender identity, pregnancy or related condition (including breastfeeding) or any other basis protected by applicable law. If you have a disability or additional need that requires accommodation, please do not hesitate to let us know.

Hybrid working

It’s hugely important for us to share knowledge and build strong relationships with each other, and we find it easier to do this if we spend time together in person. This is why we follow a hybrid model, and would require you to be able to come into the office 3 days a week (currently Tuesday, Wednesday, and one other day depending on which team you’re in). If you have additional needs that would prevent you from following this hybrid approach, we’d be happy to talk through these if you’re selected for an initial screening call.