SR Information Security Engineer - IS-Mod - 80651

Mayo Career Site US; Rochester (MN); On-site; USD 120,000 - 180,000; Full time

Job summary

Mayo Clinic in Rochester, MN seeks a Senior Information Security Engineer to lead complex security initiatives. This senior-level technical role provides advanced expertise across information security domains, operates with autonomy, and serves as a technical authority designing, implementing, and optimizing security solutions to address enterprise risk.

The scope includes SSDLC initiatives to enable security in software development and delivery pipelines, and research into agentic and

Qualifications

• Senior-level security engineering experience with autonomy and technical authority.
• Experience implementing SSDLC and secure software development practices.
• Ability to translate security requirements into scalable solutions.
• Collaborative mindset across Information Security and IT teams.

Responsibilities

• Lead complex security engineering initiatives across multiple domains.
• Design, implement and optimize security solutions to address enterprise risk.
• Collaborate with development teams to enable security in pipelines.
• Research emerging agentic and AI-assisted development risks and controls.
• Evaluate security technologies and capabilities for AI-enabled software

Skills

Security engineering

SSDLC

AI/agentic security

Lead cross-functional initiatives

Education

Bachelor’s degree in Computer Science or related field

Job description

The Senior Information Security Engineer is a senior-level technical position responsible for leading complex security engineering initiatives and providing advanced expertise across multiple information security domains. The position operates with significant autonomy, serves as a technical authority, and is accountable for designing, implementing, and optimizing security solutions that address enterprise risk, regulatory requirements, and business objectives.

Depending on the area of focus, the Senior Information Security Engineer may lead Secure Software Development Lifecycle (SSDLC) initiatives focused on enabling security across software development and delivery pipelines or advancing security practices for agentic and AI-assisted software development. Examples of such activities include the following:

• Serves as a technical subject matter expert, collaborating across Information Security and IT to translate security requirements into practical and scalable solutions. Provide adoption guidance for developers.
• Design and maintain representative development environments and CI/CD pipelines to evaluate, validate, and demonstrate application security tools and controls.
• Design and maintain representative agentic development workflows to test and validate security controls.
• Research emerging agentic and AI-assisted development practices and associated security risks and controls.
• Evaluate security technologies and capabilities for risks introduced by agentic and AI-assisted software development.