Director of Security

🔥 4 minutes ago

🇺🇸 United States – Remote

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 15%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Sequencing

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 2017

🏥 Healthcare

🧬 Biotechnology

☁️ SaaS

💰 Venture Round on 2024-01

Healthcare • Biotechnology • SaaS

Sequencing is a direct-to-consumer genetic testing company that offers 30x whole genome sequencing (WGS) from at-home saliva kits or by allowing users to upload existing DNA data. Sequencing provides comprehensive DNA reports and advanced genetic analyses covering 15,000+ diseases, conditions, and traits, plus raw data downloads (FASTQ, BAM, VCF) including SNPs, INDELs, SVs, CNVs and mitochondrial heteroplasmy. They offer an optional subscription for continuous monthly reanalysis of a customer's genome as research advances, emphasize privacy guarantees (HIPAA- and Privacy Shield-compliant, claims they never sell data), and sell bundled WGS products for health, rare disease, carrier screening, medication response, nutrition, fitness, and family planning. The company positions itself around lifelong health intelligence, personalized guidance, and rare disease diagnosis.

📋 Description

• Build and own Sequencing’s security function from the ground up • Create the security ownership map with Platform Engineering • Set policy, run assurance, and own application security, offensive security, and incident response leadership • Complete a HIPAA and HITECH review and deliver a prioritized remediation roadmap by day 45 • Reach SOC 2 readiness within six months • Formalize incident response severity models, escalation paths, communications, executive coordination, and post-incident reviews • Extend security policy to AI tooling and model providers, including data classification, acceptable use, and data-handling standards • Run the security program, including policy, risk register, security awareness and training, and GRC tooling • Scope and manage external penetration-testing firms, triage findings, and drive remediation • Own security reviews of third-party data flows, partner and marketplace apps, provider data sharing, marketing and analytics integrations, and AI model providers • Own security standards for contractors, agencies, and third-party development partners across a distributed workforce • Own SaaS governance, shadow IT visibility, and identity lifecycle policy • Apply AI to detection, log triage, evidence collection, policy and control drafting, and code and infrastructure review • Serve as the escalation point for security incidents, including after hours when needed • Report security posture, risk, and roadmap to the founder and leadership team • Translate security findings into practical actions for engineering teams • Report to the Head of Engineering and work alongside Platform Engineering, Bioinformatics, and AI functions • Hire and coach a small security team as the program matures

🎯 Requirements

• 8+ years in security • At least one stretch as the first or only security leader at a company under a few hundred people • Experience taking a company through SOC 2 or building a HIPAA program from scratch • ISO 27001 is a plus • Hands-on experience in AWS and web application security • Ability to read a Terraform PR, triage a penetration-testing finding, and tune a WAF rule • Experience running penetration tests through vendors, triaging findings, and closing them with engineers • Experience securing a consumer-facing product at scale, including identity and account security, MFA, credential stuffing defense, session security, and account recovery abuse • Understanding of privacy and breach obligations beyond HIPAA • Daily use of coding assistants and LLMs in security workflows • Experience briefing a board, founder, or executive team during a live incident • Exceptional written and verbal communication skills for explaining risk and tradeoffs to non-technical leaders • Nice to have: healthcare or genomics experience; state genetic privacy laws; FTC Health Breach Notification Rule; state breach notification requirements; ecommerce or payment-processing security; ISO 27001; PCI DSS; Drupal security; GDPR and international data transfers; mobile application security; Vanta or Drata; SIEM; Cloudflare Enterprise; Zero Trust

🏖️ Benefits

• Comprehensive medical, dental, and vision insurance coverage • 401(k) with company match • Paid time off • Paid volunteer time off • Fully remote work • Equipment provided • Internet and cell reimbursements • Parental bonding leave • Private, confidential clinical-grade whole genome sequencing for you and your immediate family

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume