Information Technology Security Engineer in London

The Information Security team defends the company's digital infrastructure by designing, implementing, and improving the company's cybersecurity architecture. This is a critical role responsible for protecting infrastructure, cloud, edge devices, and data against unauthorized use, modification, exfiltration, or damage. This role identifies threats, manages projects and engineers solutions that impact the entire company. An ideal candidate for this role is technical, dedicated to learning new things, security-minded, has strong initiative, and is able to manage projects autonomously. This role is office-based in the central London Medpace office.

Responsibilities include:

• Design, deploy, and maintain enterprise security solutions with minimal oversight, collaborating with global IT teams to protect Medpace's systems.
• Lead cross-functional security projects from planning through execution, coordinating with stakeholders across departments to deliver results.
• Serve as a technical escalation point for complex security incidents or issues, independently investigating and resolving advanced problems, especially during off-hours for global coverage.
• Provide guidance to SOC Analysts and IT teams as needed.
• Improve and automate security operations by developing scripts, integrations, or workflows to reduce manual effort, enhance detection capabilities, and streamline incident response.
• Integrate security into enterprise systems and processes, working closely with Network, Cloud, and DevOps teams to embed robust security controls and best practices into infrastructure and software lifecycles.

Qualifications:

• Bachelor's degree in Information Systems, Cybersecurity, or a related field.
• 4+ years of experience in IT/Information Security (with at least 2 years in a security engineering role or similar).
• In-depth knowledge of enterprise IT environments, including Windows Server/Active Directory, networks, and cloud architectures (Azure preferred), and how to secure them.
• Experience with scripting languages (e.g., PowerShell, Python) to integrate and automate security processes.
• Experience in one or more specialized security domains is a plus – for example, DevSecOps pipeline security, cloud security architecture (Azure/AWS), network segmentation, AI governance, advanced identity management, red-team/pentesting, or enterprise vulnerability management tools.
• Familiarity with compliance frameworks (ISO 27001, NIST, GDPR, etc.) is beneficial.

Medpace is a full-service clinical contract research organization (CRO) providing phase I-IV clinical development services to the biotechnology, pharmaceutical, and medical device industries. Our mission is to accelerate the global development of safe and effective medical therapeutics through the advancement of clinical research.

Work alongside physicians, scientists, and industry-leading experts committed to advancing the global development of medical therapeutics through clinical research excellence.

Contribute to an interactive team environment that empowers decision making, creative thinking, and continuous learning through open communication and mutual trust.

Office based environment with on-site mentors, defined career paths with clear advancement opportunities, and ongoing training and continuous learning opportunities throughout your career.

Competitive compensation programs that recognize and reward performance, comprehensive health, wellness, retirement, and PTO benefits.