Senior Cybersecurity Engineer - San Francisco, United States - Exact Sciences

Description

Help us change lives

At Exact Sciences, we're helping change how the world prevents, detects and guides treatment for cancer. We give patients and clinicians the clarity needed to make confident decisions when they matter most. Join our team to find a purpose-driven career, an inclusive culture, and robust benefits to support your life while you're working to help others.

Position Overview

At Exact Sciences, we are cancer fighters. We are united by our mission to change lives by providing earlier, smarter answers. Through advances in cancer detection and treatment guidance, we will help eradicate the disease and the suffering it causes. Exact Sciences' CISO Office supports this mission by defending the millions of digital patient, practitioner, and employee lives within our environments. Defending today and securing tomorrow is no small feat. To help achieve this, the team is in search of a Senior Cybersecurity Engineer to join our collaborative team comprised of passionate experts.

The Senior Cybersecurity Engineer provides technical leadership on secure coding practices along with the installation, operation, service, and maintenance of a variety of multi-user information security systems and provides cybersecurity consulting to make our internal and commercial offerings secure. As a hands-on technical expert, the Senior Cybersecurity Engineer works with development teams while handling the complex and detailed technical work necessary to establish security systems, and drive cybersecurity technical initiatives including best practices. The Senior Cybersecurity Engineer provides mentorship and guidance to the CISO team and drives the growth of cybersecurity skills across the company through several channels leveraging your expertise.

This is a hybrid position. The working arrangement will be a blend of remote and weekly onsite work (3 days in the office each week and up to 2 days remote each week) in any of the following office locations: Madison, WI; Phoenix, AZ; or Cambridge, MA.

Essential Duties

Include, but are not limited to, the following:

• Build relationships with development teams and provide guidance where necessary.
• Work with IT system owners to provide guidance on vulnerability remediation and reporting.
• Create awareness across IT system owners of the importance of keeping systems up to date.
• Play an integral role in the design and build of systems through architecture reviews and meeting with stakeholders.
• Drive strategy, lead and execute projects to implement improvements of critical security programs e.g., DevSecOps, Data Security and IAM.
• Act as a leader on the team by providing guidance to and growing skillsets of team members.
• Understand and assess our environments leveraging common cybersecurity frameworks (NIST, ISO) to access address gaps.
• Educate and train staff across the organization on key security topics to raise the cybersecurity IQ of the organization.
• Set standards, develop technical documentation to describe the deployment, configuration, and management of information security systems.
• Ability to take a high degree of initiative, and work with little supervision.
• Uphold company mission and values through accountability, innovation, integrity, quality, and teamwork.
• Support and comply with the company's Quality Management System policies and procedures.
• Maintain regular and reliable attendance.
• Ability to act with an inclusion mindset and model these behaviors for the organization.
• Ability to travel 20% of working time away from work location, may include overnight/weekend travel depending on location.

Minimum Qualifications

• Bachelor's Degree in field related to essential duties; or Associate Degree and 2 years of relevant experience; or High School Diploma or General Education Degree (GED) and 4 years of relevant experience.
• 8+ years of Information Technology experience in one or more of the following: networking, systems administration, systems analyst, or software engineering.
• 5+ years in a Cybersecurity Security role with expertise in one or more of the following; network security, application security, cloud security, cryptography, or identity and access management.
• 2+ years in an ISO 27001, SOX, HIPAA or HITRUST environment.
• Demonstrated ability to perform the essential duties of the position with or without accommodation.
• Authorization to work in the United States without sponsorship.

Preferred Qualifications

• Obtained or working towards cybersecurity certification/s (GDSA, CCSP, GSEC, etc.).
• Experience using Agile methodologies.
• 5+ years as a application security engineer, database security engineer, or cloud security engineer.
• Experience in information security within a public or private cloud infrastructure environment; including, but not limited to, Azure, and AWS.

Salary Range:

Exact Sciences is proud to offer an employee experience that includes paid time off (including days for vacation, holidays, volunteering, and personal time), paid leave for parents and caregivers, a retirement savings plan, wellness support, and health benefits including medical, prescription drug, dental, and vision coverage. Learn more about our benefits .

Our success relies on the experiences and perspectives of a diverse team, and Exact Sciences fosters a culture where all employees can develop personally and professionally with a sense of respect and belonging. If you require an accommodation, please contact us here .

Not ready to apply? Join our talent community and stay up to date on what's new at Exact Sciences.

We are an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard to age, color, creed, disability, gender identity, national origin, protected veteran status, race, religion, sex, sexual orientation, and any other status protected by applicable local, state, or federal law. Any applicant or employee may request to view applicable portions of the company's affirmative action program.

To view the Right to Work, E-Verify Employer, and Pay Transparency notices and Federal, Federal Contractor, and State employment law posters, visit our compliance hub . The documents summarize important details of the law and provide key points that you have a right to know.