Security Engineer (Corporate Security), London

📋 Job Overview

Isomorphic Labs is applying frontier AI to help unlock deeper scientific insights, faster breakthroughs, and life-changing medicines with an ambition to solve all disease.

The future is coming. A future enabled and enriched by the incredible power of machine learning. A future in which diseases are curtailed or cured starting with better and faster drug discovery. 

Come and be part of an interdisciplinary team driving groundbreaking innovation and play a meaningful role in contributing towards us achieving our ambitious goals, while being a part of an inspiring and collaborative culture.

The world we want tomorrow is the one we’re building today. It starts with the culture at this company. It starts with you. 

🏢 About Isomorphic Labs

Isomorphic Labs (IsoLabs) was launched in 2021 to advance human health by building on and beyond the Nobel-winning AlphaFold system. Since then, our interdisciplinary team of drug discovery experts and machine learning specialists has built powerful new predictive and generative AI models that accelerate scientific discovery at digital speed.

Our name comes from the belief that there is an underlying symmetry between biology and information science. By harnessing AI’s powerful capabilities, we can use it to model complex biological phenomena to help design novel molecules, anticipate how drugs will perform and develop innovative medicines to treat and cure some of the world’s most devastating diseases.

We have built a world-leading drug design engine comprising AI models that are capable of working across multiple therapeutic areas and drug modalities. We are continually innovating on model architecture and developing cutting-edge capabilities to advance rational drug design.

Every day, and with each new breakthrough, we’re getting closer to the promise of digital biology, and achieving our ambitious mission to one day solve all disease with the help of AI.

🎯 The Role

As a Security Engineer (Corporate Security) you will play a pivotal role in creating and maintaining a resilient, user-friendly and scalable corporate security environment at Isomorphic Labs. Operating with a proactive, service-minded approach and a strong bias for AI and automation, you will safeguard our workforce, identity systems, and sensitive data.

In this unique and polyvalent role, you will implement and maintain pragmatic corporate security controls across a wide range of domains such as IAM, DLP, corporate/external applications, and data governance. You will participate in detection and incident response and develop long-lasting measures to improve our corporate security posture. Beyond technical controls, you will also build scalable and secure operational processes across a wide range of domains such as data transfer or systems integration that will materially impact IsoLabs’ mission. You will directly support AI/medical researchers on security topics and will ensure our cross-functional teams can innovate rapidly, securely, and with total confidence.

✅ Key Responsibilities

• Corporate Identity & Access Management (IAM): Design, optimize, and support corporate IAM structures, including group architectures, identity system integration, and streamlined employee onboarding/offboarding workflows.
• Corporate Security Controls: Audit corporate systems security and deploy/maintain a wide range of security tools (e.g., logging, monitoring & DLP, data labeling, AI agents).
• Data Governance: Collaborating with Corp Engineering, enhance data governance and security within corporate systems (Google Workspace, Confluence, Jira, Slack, etc.) by gathering user needs and co-developing scalable operating models, appropriate configurations, and SOPs.
• Incident Response & Alert Triage: Partner closely with Detection & Response security engineers to improve and triage corporate security alerts, support incident response efforts when issues arise and address Google’ vulnerabilities and bugs.
• Security Awareness: Promote corporate security rules, support security awareness training and run social engineering exercises.
• Workplace Security: Collaborate with Workplace and Tech teams to ensure the security of physical systems (badges, lab workstations) and offices.
• Security of Operations & Processes: Translate key user needs and security compliance requirements into clear operational processes—such as establishing workflows for onboarding new tools, setting up data transfers and external system integrations.
• Third-Party Risk Management (TPRM): Execute standardized vendor and software audits, improve SaaS Security Posture Management (SSPM) through tools, and address third-party integrations and supply-chain safety risks.
• Automation & AI Integration: Leverage AI tools and agentic workflows to automate routine security tasks, optimize triage, and streamline operations.
• User Enablement: Act as a positive, proactive point of contact for internal teams, delivering user-oriented security solutions that reduce friction while upholding high security standards.

📌 Required Qualifications

• Fluency in navigating complex multi-org corporate systems’ workflows and processes.
• Experience with Atlassian’s and/or Google’s tech stacks.
• Proficiency in collecting user needs and business requirements, turning high-level guidance into efficient SOPs, policies, and guidelines documents.
• Strong foundation in Corporate Systems Security and IAM, including hands-on experience with SSO, user lifecycle management, and directory/group structures.
• Proficiency in basic Python, Go, or PowerShell to interface with REST APIs across SaaS ecosystems (Slack, Google Workspace, Okta).
• Knowledge of SaaS Security Posture Management (SSPM), and ideally, experience using tools like AppOmni, Adaptive Shield, or native SaaS log analysis to spot misconfigurations.
• Experience implementing Data Loss Prevention (DLP) corporate controls, data classification/labeling, and corporate data governance frameworks.
• Practical experience establishing or executing standardized vendor technical security assessments.
• Background in supporting security incident response and handling daily security alert triage.
• A strong bias for automation and an eagerness to leverage AI tools or agentic scanning mechanisms within corporate security workflows.
• Proactive, positive, and highly user-oriented mindset with exceptional communication skills to collaborate with technical and non-technical stakeholders alike.

⭐ Desirable Experience

• Experience in high-growth tech environments, BioTech, ML-centric companies, or the pharmaceutical industry.
• Familiarity with OWASP Top 10 for LLMs, prompt injection prevention, and secure integration of internal AI assistants.
• Hands-on experience building or integrating AI-driven automation, agentic workflows, or custom scripts for security operations.
• Understanding of security patterns for Electronic Lab Notebooks (ELNs), Laboratory Information Management Systems (LIMS), or High-Performance Computing (HPC) environments.
• Familiarity with GitHub Enterprise security settings, secret scanning, and developer environment hardening.
• Familiarity with common data protection regulations and security frameworks (e.g., GDPR, ISO 27001).
• Relevant industry certifications (e.g., Security+, CISSP, CISA, GSEC).

🎁 Benefits

Isomorphic Labs is committed to equal employment opportunities regardless of sex, race, religion or belief, ethnic or national origin, disability, age, citizenship, marital, domestic or civil partnership status, sexual orientation, gender identity, pregnancy or related condition (including breastfeeding) or any other basis protected by applicable law. If you have a disability or additional need that requires accommodation, please do not hesitate to let us know.

🛂 Visa & Eligibility

Isomorphic Labs is committed to equal employment opportunities regardless of sex, race, religion or belief, ethnic or national origin, disability, age, citizenship, marital, domestic or civil partnership status, sexual orientation, gender identity, pregnancy or related condition (including breastfeeding) or any other basis protected by applicable law.