Cyber Security Engineer (Infrastructure & OT)

Chemify is revolutionising chemistry. We are creating a future where the synthesis of previously unimaginable molecules, drugs, and materials is instantly accessible. By combining AI, robotics, and the world’s largest continually expanding database of chemical programs, we are accelerating chemical discovery to improve quality of life and extend the reach of humanity.Role OverviewWe are hiring an experienced, hands-on Cyber Security Engineer to join our Corporate IT team in a hybrid role based in Glasgow. The focus of this role is securing Chemify’s infrastructure end to end — identity, endpoints, networks, on-premise servers and storage — and extending that protection into our new automated laboratory at the Health Innovation Hub (HIH), where robotics, connected fume cupboards and automated storage and conveyance systems sit alongside our corporate estate.Reporting to the Head of IT, you will own Chemify’s security posture and drive the business towards achieving and maintaining ISO 27001 and SOC 2. You will partner with infrastructure, software, automation and operations teams, as well as external equipment vendors, to make sure security is designed in from the start rather than added afterwards.This role would suit a candidate who is equally comfortable hardening a firewall, tightening conditional access policies and assessing a vendor’s remote-access request. If you thrive in a small, dynamic team with a start-up mentality and want real ownership of security across office, laboratory and manufacturing environments, this is the role for you.

Key Responsibilities

Network & Infrastructure SecurityDesign, implement and maintain network segmentation between corporate, laboratory/OT, CCTV, access control and guest networks across our Glasgow sitesOwn firewall policy, VPN and zero-trust access controls, including secure remote access for third-party equipment and software vendorsHarden on-premise infrastructure including virtualisation hosts (Proxmox), storage and backup platforms, ensuring backups are immutable and resilient to ransomwareMaintain and enforce Chemify’s technical infrastructure standards, managing exceptions where laboratory equipment cannot meet themOperational Technology (OT) & Laboratory SecurityAssess and secure connected laboratory equipment, controllers and automation systems, including OPC UA/MQTT integrations and vendor-supplied PCs and serversWork with automation, software and operations teams to define security requirements for new lab equipment before purchase and commissioningIdentify and remediate cyber risks across an extended-hours automated laboratory environmentIdentity & Endpoint SecurityStrengthen Microsoft Entra ID security including conditional access, privileged identity management (PIM), admin account separation and access reviewsPartner with the Infrastructure team on endpoint security baselines delivered via Microsoft Intune and Microsoft Defender for EndpointImplement automated identity, access and authorisation controls across cloud and on-premise platformsVulnerability, Incident & Vendor ManagementOwn vulnerability management and security incident response processes, ensuring findings are triaged, tracked and remediatedCoordinate penetration testing and lead threat modelling exercises for new services and sitesLead vendor security assessments, vendor access controls and software security reviews through our security compliance and automation platformCompliance, Governance & Physical SecurityDrive and maintain progress toward ISO 27001 and SOC 2 certification, owning technical controls and evidence within VantaImplement security monitoring, logging and alerting across the estate, including new on-premise infrastructureSupport physical security systems (CCTV and access control), including Data Protection Impact Assessments in line with UK GDPRContribute to business continuity and disaster recovery planning, including regular restore testingWhat You’ll BringDegree in Science, IT, Engineering, or a related field, or equivalent practical experienceProven experience in a cyber security, network security or security-focused infrastructure roleHands-on experience with firewalls, VPN and network segmentation (e.g. Cisco, Meraki, Fortinet or Palo Alto)Strong working knowledge of Microsoft Entra ID security, including conditional access and privileged accessSolid Linux and Windows server hardening and administration skillsExperience securing virtualisation, storage and backup platformsWorking knowledge of ISO 27001, Cyber Essentials and UK GDPRExperience running vulnerability management and incident response processesClear communication skills and the ability to engage stakeholders, vendors and contractors at all levelsBeneficial SkillsProfessional security certifications such as CISSP, SSCP, CompTIA Security+, GICSP or ISA/IEC 62443Experience securing OT/ICS, laboratory, pharmaceutical or manufacturing environmentsHands-on experience with Vanta or a comparable security compliance and automation platformFamiliarity with SIEM/SOAR tooling (e.g. Microsoft Sentinel) and Microsoft Defender XDRScripting experience in Python or PowerShellExposure to Proxmox, Veeam or Proxmox Backup ServerITSM experience and familiarity with the ITIL frameworkUK driving licence and willingness to support across Chemify’s three Glasgow sites