Principal Cybersecurity Engineer

Pacific Biosciences; United States; On-site; USD 180,000 - 280,000; Full time

Job summary

Pacific Biosciences is seeking a Principal Cybersecurity Engineer to own security architecture and engineering end to end across PacBio's network, storage, HPC, and cloud environments. You will design and implement controls, harden systems, and ensure those controls stand up to auditors, customers, and attackers alike.

This senior individual contributor role reports to the Head of Information Technology and sets the technical direction for cybersecurity at PacBio.

Qualifications

• Bachelor's degree in Computer Science, Information Security, Engineering, or a related field, or equivalent practical experience.
• 12+ years of experience in cybersecurity engineering or security architecture.

Responsibilities

• Define and own PacBio's security architecture, standards, and multi-year engineering roadmap.
• Lead ISO 27001 program work, risk assessments, and evidence for audits.
• Own security-related ITGCs and collaborate with Finance and Internal Audit.
• Design secure network, storage, HPC, and cloud environments and controls.
• Implement device and server hardening, identity and access controls, and threat detection.
• Automate security controls and evidence collection using scripting and IaC.

Skills

Security engineering

Security architecture

Risk assessments

Education

Bachelor's degree

Job description

OPPORTUNITY

PacBio's long-read sequencing platforms help scientists and clinicians resolve genetically complex problems in human health, agriculture, and basic research. The information we protect, including human genomic data, proprietary chemistry and instrument designs, and the research of the customers who trust our platforms, is among the most sensitive that exists.

We are seeking a Principal Cybersecurity Engineer to strengthen and mature PacBio's security program.

ABOUT THE ROLE

As Principal Cybersecurity Engineer, you will own security architecture and engineering end to end across PacBio's network, storage, high-performance computing (HPC), and cloud environments. You will design and implement controls, harden the systems we run, and ensure those controls stand up to auditors, customers, and attackers alike.

You will serve as the technical lead for PacBio's ISO 27001 certification and for security-related SOX IT general controls, translating requirements into practical, well-evidenced controls that fit how our scientists, engineers, and operations teams work.

This senior individual contributor role reports to the Head of Information Technology and sets the technical direction for cybersecurity at PacBio. This role requires comfort moving between hands‑on engineering, architecture, audit, and executive communication, and the ability to lead across IT, R&D, Software Engineering, Operations, and Finance without direct authority.

RESPONSIBILITIES

• Security architecture and roadmap: Define and own PacBio's security architecture, standards, and multi-year engineering roadmap across enterprise, HPC, and cloud environments. Prioritize work based on risk and track progress with clear, measurable outcomes.
• ISO 27001 certification: Serve as technical lead for PacBio's ISO 27001 program. Help define ISMS scope, conduct risk assessments, implement and evidence Annex A controls, maintain the Statement of Applicability, and lead preparation for internal, certification, and surveillance audits.
• SOX IT general controls: Own security-related ITGCs for financially significant systems, including logical access, privileged access, change management, and logging and monitoring. Partner with Finance, Internal Audit, and external auditors on control design, testing, evidence, and timely remediation of deficiencies.
• Network security: Own the security design of PacBio's networks, including segmentation, firewalls, secure remote and zero-trust access, wireless, and DNS and email security.
• Storage, data protection, and resilience: Secure large-scale research and enterprise storage through access controls, encryption, and data classification. Design and regularly test controls that allow PacBio to prevent, contain, and recover from disruptive cyberattacks, including immutable backups, recovery testing, and containment playbooks.
• HPC and cloud security: Secure the HPC clusters and cloud environments (AWS, Azure, and/or GCP) that support sequencing data analysis and R&D, including identity and privilege design, workload isolation, posture management, and security enforced through infrastructure as code.
• Device and server hardening: Define and enforce secure configuration baselines (e.g., CIS Benchmarks) for Windows, macOS, and Linux endpoints and servers, hypervisors, network devices, and IoT devices. Drive configuration compliance monitoring, vulnerability management, and patching with infrastructure and IT teams.
• Identity and access: Strengthen identity and access controls across the enterprise, including SSO, MFA, privileged access management, and periodic access reviews.
• Threat detection and response: Own EDR, SIEM, and MDR capabilities and the vendor relationships behind them. Tune detections for fidelity and coverage, lead response to significant security incidents, and run tabletop exercises and post-incident reviews.
• Connected instruments and manufacturing: Partner with R&D, Product Security, and Operations to secure connected sequencing instruments, IoT devices, and manufacturing and lab networks without disrupting production.
• Automation: Automate security controls, audit evidence collection, and remediation using Python, Terraform, Ansible, or similar tools to make compliance continuous rather than periodic.
• Customer and vendor assurance: Lead technical responses to customer security questionnaires and reviews, and assess the security posture of key vendors and service providers.
• Technical leadership and communication: Mentor IT and engineering staff on secure practices, direct the work of security vendors and contractors, and clearly communicate risk, priorities, and progress to engineers, executives, and auditors.

QUALIFICATIONS

Bachelor's degree in Computer Science, Information Security, Engineering, or a related field, or equivalent practical experience. 12 or more years of experience in cybersecurity engineering, security architecture, or