Senior Software Engineer - Cybersecurity

About the position

The Cybersecurity-Focused Senior Software Engineer will support the Instrument Software team in improving its cybersecurity maturity. There are three main areas where this support will be provided. The first is helping to understand, design, and test product features and CI/CD infrastructure relating to cybersecurity. The second is working with the various teams within instrument software in identifying, documenting, analyzing, and addressing security vulnerabilities discovered in the team's software products. The third is executing required activities and generating documentation needed for milestones and the release process of the team's software products.

Responsibilities

• Conduct and participate in threat modeling and threat model analysis result evaluation
• Provide cybersecurity expertise to architecture design
• Help design software features that increase our security maturity
• Educate the software team in software security principles, tools, libraries
• Document these software security principles, tools, libraries for the team's reference
• Deliver security-related release documentation
• Coordinate with the Illumina Product Security group in order to receive input and deliver status updates
• Work with the Illumina DevOps group to secure our continuous integration environment
• Ensure our development teams are properly implementing security features
• Partner with the Illumina on-market maintenance development team(s) to assess and triage discovered vulnerabilities
• Manage code scanning tools and participate in analysis of code scan results
• Assist the software team in its software and OS patching activities and feature design
• Collaborate with product owners and other application developers to design, code, and maintain high quality, cloud-based applications against established processes in a scrum team setting
• Work with software teams to ensure alignment of architecture to user requirements
• Occasionally provide technical assistance to escalated production issues
• Maintain awareness of industry trends and evaluate applicability of new software technologies to platform development efforts
• Provide technical leadership to an Agile team if required

Requirements

• Extensive experience working with security-related software features and tools
• Passion for securing software products with industry best practices and well-established processes
• Extensive knowledge and experience with C#, .Net
• Deep understanding of SOA, web security architecture, REST APIs, event-driven architecture, and other architectural patterns
• Proficient with source control management repositories (such as GIT, SVN, etc.) and CM practices
• Good understanding of object oriented analysis and design
• Demonstrated success in collaborating in a fast-paced team environment and delivering high-quality software products using established agile development methodologies (such as Scrum, Kanban, etc.) against formal schedules

Nice-to-haves

• Experience as security engineer in a medical or regulated industry
• Experience with security process, FDA Security guidance, AAMI TIR 57, and NIST standards
• Applied knowledge of security protocols/tools (TLS, SSH, GPG, crypto algorithms, etc.), PKI and IAM
• Keeps up to date on security-related news and publications
• Experience with hardening systems and interfaces - Windows and Linux
• Hands on experience with security tools for SAST, DAST, SCA and pen testing
• Hands on experience with build pipeline tools, such as Jenkins, TeamCity, Github Actions, or equivalent
• Be curious, detail oriented, and analytical, with a proven ability to learn quickly
• Be customer-focused, team-oriented, and motivated, taking ownership of assigned tasks
• Have proven ability to self-manage, as well as manage interdisciplinary relationships
• Have proven verbal and written communication skills

Benefits

• Access to genomics sequencing
• Family planning
• Health/dental/vision
• Retirement benefits
• Paid time off