Cyber Security Engineer (Infrastructure & OT) - #2191040

Chemify is revolutionising chemistry. We are creating a future where the synthesis of previously unimaginable molecules, drugs, and materials is instantly accessible. By combining AI, robotics, and the world’s largest continually expanding database of chemical programs, we are accelerating chemical discovery to improve quality of life and extend the reach of humanity.

Role Overview

We are hiring an experienced, hands-on Cyber Security Engineer to join our Corporate IT team in a hybrid role based in Glasgow. The focus of this role is securing Chemify’s infrastructure end to end — identity, endpoints, networks, on-premise servers and storage — and extending that protection into our new automated laboratory at the Health Innovation Hub (HIH), where robotics, connected fume cupboards and automated storage and conveyance systems sit alongside our corporate estate.

Reporting to the Head of IT, you will own Chemify’s security posture and drive the business towards achieving and maintaining ISO 27001 and SOC 2. You will partner with infrastructure, software, automation and operations teams, as well as external equipment vendors, to make sure security is designed in from the start rather than added afterwards.

This role would suit a candidate who is equally comfortable hardening a firewall, tightening conditional access policies and assessing a vendor’s remote-access request. If you thrive in a small, dynamic team with a start-up mentality and want real ownership of security across office, laboratory and manufacturing environments, this is the role for you.

Key Responsibilities:

Network & Infrastructure Security

• Design, implement and maintain network segmentation between corporate, laboratory/OT, CCTV, access control and guest networks across our Glasgow sites
• Own firewall policy, VPN and zero-trust access controls, including secure remote access for third-party equipment and software vendors
• Harden on-premise infrastructure including virtualisation hosts (Proxmox), storage and backup platforms, ensuring backups are immutable and resilient to ransomware
• Maintain and enforce Chemify’s technical infrastructure standards, managing exceptions where laboratory equipment cannot meet them

Operational Technology (OT) & Laboratory Security

• Assess and secure connected laboratory equipment, controllers and automation systems, including OPC UA/MQTT integrations and vendor-supplied PCs and servers
• Work with automation, software and operations teams to define security requirements for new lab equipment before purchase and commissioning
• Identify and remediate cyber risks across an extended-hours automated laboratory environment

Identity & Endpoint Security

• Strengthen Microsoft Entra ID security including conditional access, privileged identity management (PIM), admin account separation and access reviews
• Partner with the Infrastructure team on endpoint security baselines delivered via Microsoft Intune and Microsoft Defender for Endpoint
• Implement automated identity, access and authorisation controls across cloud and on-premise platforms

Vulnerability, Incident & Vendor Management

• Own vulnerability management and security incident response processes, ensuring findings are triaged, tracked and remediated
• Coordinate penetration testing and lead threat modelling exercises for new services and sites
• Lead vendor security assessments, vendor access controls and software security reviews through our security compliance and automation platform

Compliance, Governance & Physical Security

• Drive and maintain progress toward ISO 27001 and SOC 2 certification, owning technical controls and evidence within Vanta
• Implement security monitoring, logging and alerting across the estate, including new on-premise infrastructure
• Support physical security systems (CCTV and access control), including Data Protection Impact Assessments in line with UK GDPR
• Contribute to business continuity and disaster recovery planning, including regular restore testing

What You’ll Bring

• Degree in Science, IT, Engineering, or a related field, or equivalent practical experience
• Proven experience in a cyber security, network security or security-focused infrastructure role
• Hands-on experience with firewalls, VPN and network segmentation (e.g. Cisco, Meraki, Fortinet or Palo Alto)
• Strong working knowledge of Microsoft Entra ID security, including conditional access and privileged access
• Solid Linux and Windows server hardening and administration skills
• Experience securing virtualisation, storage and backup platforms
• Working knowledge of ISO 27001, Cyber Essentials and UK GDPR
• Experience running vulnerability management and incident response processes
• Clear communication skills and the ability to engage stakeholders, vendors and contractors at all levels

Beneficial Skills

• Professional security certifications such as CISSP, SSCP, CompTIA Security+, GICSP or ISA/IEC 62443
• Experience securing OT/ICS, laboratory, pharmaceutical or manufacturing environments
• Hands-on experience with Vanta or a comparable security compliance and automation platform
• Familiarity with SIEM/SOAR tooling (e.g. Microsoft Sentinel) and Microsoft Defender XDR
• Scripting experience in Python or PowerShell
• Exposure to Proxmox, Veeam or Proxmox Backup Server
• ITSM experience and familiarity with the ITIL framework
• UK driving licence and willingness to support across Chemify’s three Glasgow sites