Senior Information Security Engineer

🕒 il y a 1 mois

🇺🇸 États-Unis – Télétravail

⏰ Temps Plein

🟠 Senior

👮‍♂️ Cybersécurité / Ingénieur Sécurité

👻 Score fantôme 10%

Ce que ça veut dire : la probabilité que cette offre reste ouverte sans recrutement actif.Comment le lire : 60 % ou plus, on pense que c'est une offre fantôme. Un score plus bas est moins inquiétant.Comment on la calcule : ancienneté, republications, postes ouverts vs taille de l'équipe, rapidité de clôture, et si le salaire est indiqué.À noter : une estimation à partir de données publiques, pas un jugement sur l'entreprise. De vraies offres peuvent avoir un score élevé, alors prenez-le comme un indice, pas comme un fait.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

Baylor Genetics

Site WebLinkedInTous les Emplois

501 - 1000 employés

Fondée en 1978

🏥 Santé

💼 Conseil

🍽️ Alimentation et boissons

Healthcare • Consulting • Food & Beverage

Baylor Genetics est un laboratoire de génomique clinique et de diagnostics de précision affilié au Baylor College of Medicine qui offre des services complets de test génétique et d'interprétation. L'entreprise propose le séquençage complet du génome et de l'exome entier, l'analyse chromosomique par microarray, des tests mitochondriaux, la pharmacogénomique et des dosages spécialisés, accompagnés de conseils génétiques, de soutien pour les prestataires et de ressources pour l'assurance/paiement. Baylor Genetics soutient les prestataires de soins de santé, les chercheurs et les familles grâce à une interprétation améliorée par l'IA, une intégration de données multimodales et des services cliniques et de laboratoire de bout en bout.

Description

• Serve as a senior technical leader within Baylor Genetics’ Information Security team • Design, implement, and operate security controls protecting systems, networks, endpoints, and cloud environments • Lead and operate detection and response capabilities, including SIEM/MDR, EDR/XDR, and SOAR • Tune security detections using organization-specific policies and response actions • Establish and mature a centralized, risk-based vulnerability management program with patch SLAs and secure configuration baselines • Remediate penetration test findings • Design and implement identity and access security controls, including PAM, JIT access, MFA, SSO, Conditional Access, and least privilege • Advance the Zero Trust roadmap across identity, endpoints, networks, cloud, and data • Respond to and investigate security incidents through detection, containment, investigation, and recovery • Lead post-incident reviews • Implement and manage PHI/PII data protection controls, including auto-classification and DLP across endpoints and cloud services • Collaborate with IT, Privacy, Compliance, and application teams to embed security best practices into system designs, cloud deployments, and the SDLC • Provide technical mentorship to other engineers • Report to the Director of Information Security

🎯 Exigences

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field — or an equivalent combination of education and experience • Minimum of 6–8 years of experience in information security engineering, security operations, or a related discipline • Hands-on expertise with SIEM/MDR and EDR platforms (e.g., CrowdStrike, Microsoft Sentinel) and security event monitoring, triage, and tuning • Strong knowledge of network security, firewalls, IDS/IPS, cryptography, authentication, and authorization principles • Experience with vulnerability management, penetration test remediation, incident response, and endpoint/OS hardening • Working knowledge of cloud security (Azure and/or AWS) and identity platforms (SSO, MFA, conditional access) • Understanding of compliance frameworks and regulations relevant to healthcare data, including HIPAA, HITRUST, NIST, and GDPR • Excellent written and verbal communication skills, with the ability to convey complex security concepts to technical and non-technical stakeholders • Advanced certifications such as CISSP, CISM, GCIA, GCIH, or a cloud security specialty (e.g., Azure/AWS Security) preferred • Experience with privileged access management (PAM), SOAR, and Zero Trust architectures preferred • Familiarity with data loss prevention (e.g., Microsoft Purview) and data classification programs preferred • Prior experience in a healthcare, clinical laboratory, or other regulated (HIPAA/PHI) environment preferred • Strong analytical and problem-solving skills with a risk-based, outcome-driven mindset • Sound judgment and composure when responding to security incidents under pressure • Collaborative, cross-functional approach with the ability to influence peers and mentor others • Self-directed, detail-oriented, and able to prioritize competing demands in a fast-moving environment

🏖️ Avantages

• Remote work based in the USA • Periodic on-call availability may be required to support security incident response • Occasional travel for meetings, conferences, or audits