Sr Product Security Engineer

Illumina, Inc. in; San Diego (CA); Remote; USD 126,000 - 191,000; Full time

Job summary

A leading company in genomics is seeking a Sr Product Security Engineer to enhance security for medical devices and software. The role requires a strong background in product security, collaboration with development teams, and the ability to drive security initiatives throughout the product lifecycle.

Benefits

Access to genomics sequencing

Health, dental, vision benefits

Retirement benefits

Paid time off

Qualifications

• Experience in application and product security.
• Expertise in building secure designs for software products.
• Understanding of OWASP Top 10 Web Application Vulnerabilities.

Responsibilities

• Drive Secure Design working in close partnership with Development Teams.
• Deliver security requirements at the system and software levels.
• Guide, mentor and advise the Verification Team.

Skills

Product Security

Software Development

Cybersecurity

Communication

Education

Bachelor's degree in computer science, engineering

Professional qualifications (CISSP, CISM, CSSLP, OSCP)

Tools

nMap

Wireshark

Kali Linux

OpenVAS

Job description

Sr Product Security Engineer (Finance)

What if the work you did every day could impact the lives of people you know? Or all of humanity?

At Illumina, we are expanding access to genomic technology to realize health equity for billions of people around the world. Our efforts enable life-changing discoveries that are transforming human health through the early detection and diagnosis of diseases and new treatment options for patients.

Working at Illumina means being part of something bigger than yourself. Every person, in every role, has the opportunity to make a difference. Surrounded by extraordinary people, inspiring leaders, and world changing projects, you will do more and become more than you ever thought possible.

Illumina's Product Security Team is seeking a talented Sr Product Security Engineer to help us strengthen our world-class business.

Position Summary

• This role requires Product Security and software development experience, knowledge, and skills. You'll be responsible for leading pre-market and post-market security initiatives & solutions including Illumina medical instruments and connected software before they are released to customers.
• The Product Security Architect is a critical role at Illumina in ensuring the manufacturing of our physical medical devices and software solutions development are secure.
• As a valued team member, you will define, identify, evaluate, and maintain controls, providing visibility into the health, and security of our products.
• You will collaborate closely with our engineering, development, and technology groups to define and maintain medical device security and lead the change, ensuring secure posture for Illumina products in Premarket and Postmarket phases of the product.
• The Product Security Architect is responsible for introducing security controls, processes and testing throughout entire product SDLC, from hardware selection to decommissioning the device . You are highly motivated to integrate security capabilities into continuous release planning and execution for all Illumina products.

Responsibilities

• Drive Secure Design working in close partnership with our Development Teams.
• Deliver security requirements at the system and software levels, partnering with the development team to ensure correct implementation.
• Partner with the Development Teams and deliver threat models on software development projects, identifying and prioritizing cybersecurity requirements.
• Guide, mentor and advise the Verification Team, ensuring that verification of cybersecurity requirements is performed correctly and with full coverage.
• Partner with the Development and Quality teams; drive and deliver Cybersecurity Risk Assessments on projects, ensuring all risks are identified, prioritized and addressed as expected.
• Drive and execute/facilitate all varieties of cybersecurity testing; from penetration testing to vulnerability scans, ensuring along the way that all findings are triaged/root caused/addressed appropriately.
• Work tirelessly on improving the integration of Product Security into SDLC, building trust, expertise, and process efficiencies.
• Drive security initiatives by example, be knowledgeable and passionate, be strong communicator and never miss an opportunity to educate and train partner teams on the topics of Product Security.

Requirements

• Experience in application and product security coupled with a strong depth of understanding and knowledge of relevant technology stacks.
• Expertise in building secure designs for software products or perform penetration testing for software products.
• Ability to understand code and system configurations and being able to recommend modifications to those, to ensure better security posture.
• Very in-depth understanding of software development and the ability to effectively build and communicate security designs, taking in consideration software design context.
• Understanding of three or more security domains (such as for example, platform security, network security, application security, etc.)
• Understanding of OWASP Top 10 Web Application Vulnerabilities.
• Coding experience with two or more programming languages.
• Experience with software security tools such as nMap, Wireshark, Kali Linux, OpenVAS
• Effective communicator delivering key messages to team stakeholders, and business partners using informative clear verbal and written communications.
• Experience with a medical device manufacturer or other relevant regulated industries is preferred.

Education

• Bachelor's degree in computer science, engineering, or relevant work experience.
• Professional qualifications are preferred such as: CISSP, CISM, CSSLP, or OSCP.

#LI-REMOTE

The estimated base salary range for the Sr Product Security Engineer role based in the United States of America is: $126,800 - $190,200. Should the level or location of the role change during the hiring process, the applicable base pay range may be updated accordingly. Compensation decisions are dependent on several factors including, but not limited to, an individual's qualifications, location where the role is to be performed, internal equity, and alignment with market data. Additionally, all employees are eligible for one of our variable cash programs (bonus or commission) and eligible roles may receive equity as part of the compensation package. We offer a wide range of benefits as innovative as our work, including access to genomics sequencing, family planning, health/dental/vision, retirement benefits, and paid time off.

At Illumina, we strive to foster a diverse and inclusive workplace by cultivating an environment in which everyone contributes to our mission. Built on a strong foundation, Illumina has always been rooted in openness, collaboration, and seeking alternative views and perspectives to propel innovation in genomics. We are proud to confirm a zero-net gap in pay, regardless of gender, ethnicity, or race. We also have several Employee Resource Groups (ERG) that deliver career development experiences, increase cultural awareness, and demonstrate our collective commitment to diversity and inclusion in the communities we live and work. We are proud to be an equal opportunity employer committed to providing employment opportunity regardless of sex, race, creed, color, gender, religion, marital status, domestic partner status, age, national origin or ancestry, physical or mental disability, medical condition, sexual orientation, pregnancy, military or veteran status, citizenship status, and genetic information. Illumina conducts background checks on applicants for whom a conditional offer of employment has been made. Qualified applicants with arrest or conviction records will be considered for employment in accordance with applicable local, state, and federal laws. Background check results may potentially result in the withdrawal of a conditional offer of employment. The background check process and any decisions made as a result shall be made in accordance with all applicable local, state, and federal laws. If you require accommodation to complete the application or interview process, please contact [e-mail]. To learn more, visit: https://www.dol.gov/ofccp/regs/compliance/posters/pdf/eeopost.pdf. The position will be posted until a final candidate is selected or the requisition has a sufficient number of qualified applicants. This role is not eligible for visa sponsorship.