Sr Information Security Engineer

Baylor Genetics; Northern (KY); Hybrid; USD 140,000 - 180,000; Full time

Job summary

Baylor Genetics seeks a Senior Information Security Engineer to lead security controls across systems, networks, endpoints, and cloud environments. You will drive MDR/SIEM, PAM, and Zero Trust initiatives while mentoring engineers and coordinating with privacy and compliance teams.

Reporting to the Director of Information Security, you will respond to incidents end-to-end, manage vulnerability programs, and protect PHI/PII data in a healthcare-regulated setting.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or related field or equivalent experience.
• 6–8 years in information security engineering, security operations, or related discipline.
• Hands-on with SIEM/MDR and EDR platforms (CrowdStrike, Microsoft Sentinel) and security event monitoring, triage, and tuning.
• Strong knowledge of network security, firewalls, IDS/IPS, cryptography, authentication, and authorization.
• Experience with vulnerability management, remediation, incident response, and endpoint/OS hardening.
• Cloud security knowledge (Azure and/or AWS) and identity platforms (SSO, MFA, CA).
• Familiarity with HIPAA/HITRUST, NIST, GDPR compliance frameworks.

Responsibilities

• Lead organization detection and response capabilities with SIEM/MDR, EDR/XDR, and SOAR.
• Establish and mature vulnerability management with patch SLAs and secure baselines.
• Design and implement PAM, JIT access, MFA, SSO, Conditional Access, and least-privilege controls.
• Advance Zero Trust across identity, endpoints, networks, cloud, and data.
• Respond to security incidents end-to-end and lead post-incident reviews.
• Implement data protection controls for PHI/PII across endpoints and cloud services.
• Collaborate with IT, Privacy, Compliance, and applications teams to embed security in system designs.

Skills

SIEM/MDR/EDR

Zero Trust

Vulnerability management

Incident response

Cloud security

PAM/JIT/MFA/SSO

HIPAA/HITRUST knowledge

Education

Bachelor’s degree in Computer Science/Cybersecurity/IT

Tools

CrowdStrike

Microsoft Sentinel

Microsoft Purview

Azure/AWS security tooling

Job description

Job Category: Information Technology (IT)

Requisition Number: SRINF002510

• Posted : September 9, 2026
• Full-Time
• Remote

Locations

Showing 1 location

Remote
United States

Description

JOB SUMMARY

Baylor Genetics is seeking a Senior Information Security Engineer to serve as a senior technical leader within our Information Security team. As one of the nation’s leading clinical genetic testing laboratories, we safeguard some of the most sensitive data that exists — patient genomic and health information — and this role is critical to protecting it.

Reporting to the Director of Information Security, the Senior Information Security Engineer designs, implements, and operates the security controls that protect Baylor Genetics’ systems, networks, endpoints, and cloud environments. This role leads key operational security initiatives — including managed detection and response (MDR/SIEM), privileged access management, vulnerability management, and Zero Trust — and provides technical mentorship to other engineers. Scope may evolve as organizational needs change.

KEY RESPONSIBILITIES

• Lead and operate the organizational detection and response capabilities, including SIEM/MDR and EDR/XDR, and SOAR (e.g., CrowdStrike or Microsoft Sentinel), tuning detections with organization specific policies and response actions.
• Establish and mature a centralized, risk-based vulnerability management program with enforced patch SLAs, secure configuration baselines, and remediation of penetration test findings.
• Design and implement identity and access security controls, including Privileged Access Management (PAM), Just-in-Time (JIT) access, MFA, SSO, Conditional Access, and least-privilege .
• Advance the Zero Trust roadmap across identity, endpoints, networks, cloud, and data.
• Respond to and investigate security incidents end to end — detection, containment, investigation, and recovery — in line with the incident response playbook, and lead post-incident reviews.
• Implement and manage data protection controls for PHI/PII, including auto-classification and DLP (e.g., Microsoft Purview) across endpoints and cloud services.
• Collaborate with IT, Privacy, Compliance, and application teams to embed security best practices into system designs, cloud deployments, and the SDLC.

QUALIFICATIONS

Required

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field — or an equivalent combination of education and experience.
• Minimum of 6–8 years of experience in information security engineering, security operations, or a related discipline.
• Hands-on expertise with SIEM/MDR and EDR platforms (e.g., CrowdStrike, Microsoft Sentinel) and security event monitoring, triage, and tuning.
• Strong knowledge of network security, firewalls, IDS/IPS, cryptography, authentication, and authorization principles.
• Experience with vulnerability management, penetration test remediation, incident response, and endpoint/OS hardening.
• Working knowledge of cloud security (Azure and/or AWS) and identity platforms (SSO, MFA, conditional access).
• Understanding of compliance frameworks and regulations relevant to healthcare data, including HIPAA, HITRUST, NIST, and GDPR.
• Excellent written and verbal communication skills, with the ability to convey complex security concepts to technical and non-technical stakeholders.

Preferred

• Advanced certifications such as CISSP, CISM, GCIA, GCIH, or a cloud security specialty (e.g., Azure/AWS Security).
• Experience with privileged access management (PAM), SOAR, and Zero Trust architectures.
• Familiarity with data loss prevention (e.g., Microsoft Purview) and data classification programs.
• Prior experience in a healthcare, clinical laboratory, or other regulated (HIPAA/PHI) environment.

.

COMPETENCIES

• Strong analytical and problem-solving skills with a risk-based, outcome-driven mindset.
• Sound judgment and composure when responding to security incidents under pressure.
• Collaborative, cross-functional approach with the ability to influence peers and mentor others.
• Self-directed, detail-oriented, and able to prioritize competing demands in a fast-moving environment.

PHYSICAL DEMANDS AND WORK ENVIRONMENT

• Remote role based in the USA.
• Frequently required to sit and use hand and finger dexterity for prolonged periods.
• May require periodic on-call availability to support security incident response.
• Occasional travel for meetings, conferences, or audits.

EEO STATEMENT

Baylor Genetics is proud to be an equal opportunity employer committed to fostering an inclusive and diverse workplace. We welcome and encourage applicants from all backgrounds to apply. We do not discriminate on the basis of race, color, religion, national origin, sex, sexual orientation, gender identity, age, veteran status, disability, genetic information, pregnancy, childbirth, or any other status protected by applicable federal, state, or local law. If you need an accommodation during the application process, please contact our Human Resources team.

Equal Opportunity Employer
This employer is required to notify all applicants of their rights pursuant to federal employment laws.For further information, please review the Know Your Rights notice from the Department of Labor.