Sr Product Security Engineer

Position Overview

• Location Type:
• Job Type: Full time
• Salary:

Illumina is dedicated to expanding access to genomic technology to realize health equity for billions of people worldwide. Our work enables life-changing discoveries that transform human health through early disease detection, diagnosis, and new treatment options. Working at Illumina means being part of something bigger than yourself, with opportunities to make a difference in every role.

The Product Security Team is seeking a talented Sr. Product Security Engineer to strengthen our business. This role requires experience in Product Security and software development. You will lead pre-market and post-market security initiatives and solutions for Illumina's medical instruments and connected software before customer release.

As a Product Security Architect, you will be critical in ensuring the security of our physical medical devices and software solutions development. You will define, identify, evaluate, and maintain controls, providing visibility into the health and security of our products. You will collaborate closely with engineering, development, and technology groups to define and maintain medical device security and lead changes to ensure a secure posture for Illumina products throughout their lifecycle. You will introduce security controls, processes, and testing throughout the entire product SDLC, from hardware selection to decommissioning. You are highly motivated to integrate security capabilities into continuous release planning and execution for all Illumina products.

Responsibilities

• Drive Secure Design in close partnership with Development Teams.
• Deliver security requirements at the system and software levels, partnering with the development team to ensure correct implementation.
• Partner with Development Teams to deliver threat models on software development projects, identifying and prioritizing cybersecurity requirements.
• Guide, mentor, and advise the Verification Team, ensuring correct and comprehensive verification of cybersecurity requirements.
• Partner with Development and Quality teams to drive and deliver Cybersecurity Risk Assessments on projects, ensuring all risks are identified, prioritized, and addressed.
• Drive and execute/facilitate various cybersecurity testing, from penetration testing to vulnerability scans, ensuring findings are triaged, root-caused, and addressed appropriately.
• Work on improving the integration of Product Security into SDLC, building trust, expertise, and process efficiencies.
• Drive security initiatives by example, demonstrating knowledge and passion, strong communication skills, and educating partner teams on Product Security topics.

Requirements

• Experience in application and product security with a strong understanding of relevant technology stacks.
• Expertise in building secure designs for software products or performing penetration testing for software products.
• Ability to understand code and system configurations and recommend modifications for improved security posture.
• Very in-depth understanding of software development and the ability to effectively build and communicate security designs within a software design context.
• Understanding of three or more security domains (e.g., platform security, network security).