Network Information Security Engineer

We are hiring a full-time Cybersecurity Engineer who is technical, dedicated to learning new things, security-minded, has strong initiative, and is able to manage projects autonomously. The Information Security team defends the company’s digital infrastructure by designing, implementing, and improving the company’s cybersecurity architecture. This is a critical role responsible for protecting infrastructure, cloud, edge devices, and data against unauthorized use, modification, exfiltration, or damage. If you’re excited to be part of a fast-growing team, then Medpace is a great place to grow your career.

Responsibilities

Design, deploy, and maintain enterprise security solutions with minimal oversight, collaborating with global IT teams to protect Medpace’s systems (e.g., implementing new security tools or architectures).

Experience with network security across on-prem and cloud environments, including segmentation strategies, next-generation firewalls, Azure networking (Virtual Networks, private endpoints, firewalls), and Conditional Access policies; able to work with network teams to implement solutions.

Own the administration and reliability of key security platforms (such as privileged access management, EDR, and SIEM), ensuring they are well-configured, up-to-date, and fully operational; coordinate upgrades and fixes proactively.

Lead cross-functional security projects (e.g., cloud security improvements, EDR, identity security enhancements) from planning through execution, coordinating with stakeholders across departments to deliver results.

Serve as a technical escalation point for complex security incidents or issues, independently investigating and resolving advanced problems (especially during off-hours for global coverage) and providing guidance to SOC Analysts and IT teams as needed.

Improve and automate security operations by developing scripts, integrations, or workflows to reduce manual effort, enhance detection capabilities, and streamline incident response (e.g., building security automation in cloud or SIEM).

Integrate security into enterprise systems and processes, working closely with Network, Cloud, and DevOps teams to embed robust security controls and best practices into infrastructure and software lifecycles.

Document architectures, procedures, and solutions, ensuring knowledge is captured and shared; mentor and cross-train team members (especially developing Analysts) to strengthen overall team capabilities.

Stay current with emerging threats and technologies, continuously researching new security trends, tools, and techniques to drive innovative improvements in the organization’s security posture.

Qualifications

Bachelor’s degree in Information Systems, Cybersecurity, or a related field.

4+ years of experience in IT/Information Security (with at least 2 years in a security engineering role or similar).

In-depth knowledge of enterprise IT environments, including Windows Server/Active Directory, networks, and cloud architectures (Azure preferred), and how to secure them.

Proven hands-on experience with security technologies, including some variety of SIEM, endpoint detection & response, identity/privileged access management, and cloud security tools.

Excellent communication and documentation skills, with the ability to clearly explain complex security concepts to both technical and non-technical stakeholders and coordinate effectively across teams.

Strong analytical and problem-solving skills, capable of independently troubleshooting and resolving complex security issues.

Proficiency in scripting or automation (e.g., PowerShell, Python) to integrate and automate security processes.

Self-motivated and continuously learning, with the ability to quickly adapt to new technologies and evolving threats.

Nice to have:

Experience in one or more specialized security domains is a plus – for example, DevSecOps pipeline security, cloud security architecture (Azure/AWS), network segmentation, AI governance, advanced identity management, red-team/pentesting, or enterprise vulnerability management tools.

Familiarity with regulated industries (e.g., healthcare, financial, defense) and related compliance frameworks (ISO 27001, NIST, GDPR, etc.) is beneficial.

Medpace Overview

Medpace is a full-service clinical contract research organization (CRO) providing phase l-lV clinical development services to the biotechnology, pharmaceutical, and medical device industries. Our mission is to accelerate the global development of safe and effective medical therapeutics through the advancement of clinical research. We leverage in-country regulatory and therapeutic expertise across all major therapeutic areas including oncology, cardiology, metabolic, endocrinology, central nervous system, and anti-viral and anti-infective. Headquartered in Cincinnati, Ohio, we employ more than 6,500 people across 40+ countries.

Why Medpace?

When you join Medpace, you become part of an innovative team that brings cutting-edge therapies to market while building a meaningful and rewarding career focused on scientific excellence and improving patient outcomes around the world through continuous learning and cross-functional collaboration.

Purpose-Driven Work

Work alongside physicians, scientists, and industry-leading experts committed to advancing the global development of medical therapeutics through clinical research excellence

Collaborative Culture

Contribute to an interactive team environment that empowers decision making, creative thinking, and continuous learning through open communication and mutual trust.

Leadership throughout Medpace is both accessible and approachable

Continuous Growth & Development

Office based environment with on-site mentors

Defined career paths with clear advancement opportunities

Industry renowned onboarding and training programs designed to accelerate professional development

Ongoing training and continuous learning opportunities throughout your career

An environment that encourages employees to influence change, contribute ideas, and grow quickly

Other Employee Benefits

Competitive compensation programs that recognize and reward performance

Comprehensive health, wellness, retirement, and PTO benefits

Office based culture with occasional WFH that provides flexibility for eligible positions after training

Company-sponsored social events and intramural sports

Cincinnati Headquarters Experience

A modern corporate campus designed to support collaboration and productivity

Multiple on-site dining options in the heart of Madison Square

Free on-site parking

Convenient access to on-site 24-7 fitness and wellness facilities

What to Expect Next

A Medpace team member will review your application and if your profile matches our current needs, you will be contacted for an interview. While we review all applications carefully, we are unable to respond to every applicant, and only candidates selected for interviews will be contacted.

Design, deploy, and maintain enterprise security solutions with minimal oversight, collaborating with global IT teams to protect Medpace’s systems (e.g., implementing new security tools or architectures).

Experience with network security across on-prem and cloud environments, including segmentation strategies, next-generation firewalls, Azure networking (Virtual Networks, private endpoints, firewalls), and Conditional Access policies; able to work with network teams to implement solutions.

Own the administration and reliability of key security platforms (such as privileged access management, EDR, and SIEM), ensuring they are well-configured, up-to-date, and fully operational; coordinate upgrades and fixes proactively.

Lead cross-functional security projects (e.g., cloud security improvements, EDR, identity security enhancements) from planning through execution, coordinating with stakeholders across departments to deliver results.

Serve as a technical escalation point for complex security incidents or issues, independently investigating and resolving advanced problems (especially during off-hours for global coverage) and providing guidance to SOC Analysts and IT teams as needed.

Improve and automate security operations by developing scripts, integrations, or workflows to reduce manual effort, enhance detection capabilities, and streamline incident response (e.g., building security automation in cloud or SIEM).

Integrate security into enterprise systems and processes, working closely with Network, Cloud, and DevOps teams to embed robust security controls and best practices into infrastructure and software lifecycles.

Document architectures, procedures, and solutions, ensuring knowledge is captured and shared; mentor and cross-train team members (especially developing Analysts) to strengthen overall team capabilities.

Stay current with emerging threats and technologies, continuously researching new security trends, tools, and techniques to drive innovative improvements in the organization’s security posture.

Bachelor’s degree in Information Systems, Cybersecurity, or a related field.

4+ years of experience in IT/Information Security (with at least 2 years in a security engineering role or similar).

In-depth knowledge of enterprise IT environments, including Windows Server/Active Directory, networks, and cloud architectures (Azure preferred), and how to secure them.

Proven hands-on experience with security technologies, including some variety of SIEM, endpoint detection & response, identity/privileged access management, and cloud security tools.

Excellent communication and documentation skills, with the ability to clearly explain complex security concepts to both technical and non-technical stakeholders and coordinate effectively across teams.

Strong analytical and problem-solving skills, capable of independently troubleshooting and resolving complex security issues.

Proficiency in scripting or automation (e.g., PowerShell, Python) to integrate and automate security processes.

Self-motivated and continuously learning, with the ability to quickly adapt to new technologies and evolving threats.

Nice to have:

Experience in one or more specialized security domains is a plus – for example, DevSecOps pipeline security, cloud security architecture (Azure/AWS), network segmentation, AI governance, advanced identity management, red-team/pentesting, or enterprise vulnerability management tools.

Familiarity with regulated industries (e.g., healthcare, financial, defense) and related compliance frameworks (ISO 27001, NIST, GDPR, etc.) is beneficial.