Senior Security Engineer

Job Description

You + Helix

Helix is a place where innovators and doers gather in order to drive significant progress in population genomics. We have come together to work at the intersection of clinical care, research, and genomics.

If you’re excited by the idea of making a meaningful impact and joining a team where we pride ourselves on driving innovation through fostering an environment with an emphasis on empowering one another to grow, Helix might be the place for you!

Helix + The World

Helix is the leading population genomics and viral surveillance company. Helix enables health systems, public health organizations and life science companies to accelerate the integration of genomic data into patient care and public health decision making.

We are continuing to scale our world-class team to support our dedication to empowering every person to improve their life through DNA.

What is special about this role:

Helix is looking to add a new Senior Information Security Engineer to their Security team that will take on ownership of the Security Engineering program. The Security Engineer will work across the business in order to propose and implement security controls in AWS, SaaS applications, and within a regulated Lab environment. In addition, the engineer will assist with various security areas including security awareness, incident response, audit remediations, security controls strategy, and other ad-hoc projects.

As a Senior Information Security Engineer, you will:

• Architects, designs, implements, maintains and operates information system security controls and countermeasures for a modern IaaS and SaaS environment.
• Recommends security controls and procedures within business processes.
• Articulates security risks into business terms while engaging with stakeholders
• Participate in the supplier risk management process to identify and mitigate the risk of third-party relationships.
• Maintain confidentiality of all investigations, reports, and other confidential and sensitive information associated with position
• Be team-oriented and promote execution and change through influence
• Develops monitoring and visibility capabilities; reports on incidents, vulnerabilities, and trends to IT or executive management.
• Oversees the response to information system security incidents.
• Oversees the administration of authentication and access controls.

About You:

• Bachelor’s degree in computer science, information systems, engineering, or a related field required.
• At least 8 years of specific experience with methodologies, activities, tools and enablers in a technology related industry that track to the roles and responsibilities listed.
• Experience with securing and monitoring AWS environments.
• Experience with securing and monitoring SaaS environments.
• Experience with a variety of security tools including Crowdstrike, DUO, Netskope preferred.
• Knowledge of and experience with AWS CDK preferred.
• Extensive experience with computing systems - networking / operating systems, and virtualization.
• Possess industry-specific knowledge regarding security related regulations and controls, such as SOC2 Type II, Data Privacy, ISO 27001, FedRamp, and NIST 800, as well as technical approach and best practice advice for practitioners
• Excellent written and verbal communication skills.
• Strong analytical and problem-solving skills.
• Ability to work both independently and as part of a team to deliver quality work product in a timely fashion in a fast-paced environment.
• Ability to prioritize tasks.
• Ability to work well with people from many different disciplines with varying degrees of technical experience.
• Ability to adapt to a dynamic, rapidly changing business and technical environment.
• Ability to exercise good professional judgment.
• Ability to maintain confidentiality.
• Ability to develop security standards and guidelines based on best practices and industry standards
• Infosec related training or certifications such as CISSP and/or GIAC

What’s important to us:

• Curiosity — we are all passionate about the possibilities enabled by having access to your own genome
• Responsibility — we have an obligation to people and our partners to operate with highly credible research guided by well respected advisors, with clear and effective communication about our products
• Agility — flexibility and a desire to be nimble, smart, and effective are important to the Helix culture
• Follow-through — we’re building a diverse team with amazing track records of achievement in multidisciplinary environments

What Helix has to offer you:

What’s important to us:

• Curiosity — we are all passionate about the possibilities enabled by having access to your own genome
• Responsibility — we have an obligation to people and our partners to operate with highly credible research guided by well respected advisors, with clear and effective communication about our products
• Agility — flexibility and a desire to be nimble, smart, and effective are important to the Helix culture
• Follow-through — we’re building a diverse team with amazing track records of achievement in multidisciplinary environments

What Helix has to offer you:

Aside from working alongside brilliant, dedicated, passionate, down-to-earth, curious, warm, and thoughtful people, we also provide great benefits:

• Competitive compensation, Comprehensive Health insurance package including employer sponsored HSA
• 12 weeks of Maternity or Paternity leave
• 401(k) with employer matching and 100% vested on first day
• Comprehensive Well Being benefits
• Flexible PTO

Helix is proud to be an equal opportunity employer, and committed to providing employment opportunities regardless of race, religious creed, color, national origin, ancestry, physical disability, mental disability, medical condition, genetic information, marital status, sex, gender, gender identity, gender expression, pregnancy, childbirth and breastfeeding, age, sexual orientation, military or veteran status, or any other protected classification, in accordance with applicable federal, state, and local laws.