Sr. Information Security Engineer

Reporting to the Director, Information Security Engineering, the Senior Information Security Engineer is responsible for successfully executing enterprise-wide Information Security controls and processes that protect the company’s data and functions across all business areas, adhering to data protection standards, procedures, regulatory oversight, and technical solutions for the Information Security department. Support of program control processes to ensure mitigation of risks and approved configuration certification of systems. This position requires extensive experience, knowledge, and skills in the areas of cloud-based engineering and design.

Supporting established processes, analysis of computing environment, coordination, testing, CI\CD workflow, IAM, and participation in periodic audits. Performs all duties in accordance with the company’s policies and procedures, all state, federal, and country laws and regulations, wherein the company operates. Delivery of activity reporting, including metrics, environment impact, effectiveness progress, and performance indicators.

Duties & Responsibilities
- Assists in the execution of the Information Security Program, Data Governance practices, and Privacy assurance
- Evaluates ongoing practices and procedures, technical documentation, and diagrams for appropriate security measure maturity and effectiveness
- Coordinates with team members and other technical departments for project activities, to ensure completion of assigned project requirements
- Monitors effective and actionable Information Security reporting across the InfoSec technical landscape and ensure anomalies are identified for preventive or responsive measures
- Executes as a reliable second line-of-defense via documented processes, controls, templates, and rigors
- Practices applicable procedures and standards that meet existing and newly developed policy and regulatory requirements (i.e., PCI-DSS, SOX, GDPR, CCPA, etc.)
- Provides consulting on best practices to internal customers to ensure processes are embedded at the correct time and frequency and to ensure compliance to security standards
- Evaluates existing tool effectiveness, and provides feedback for continuous improvement to the security controls in place to enhance the company’s security posture

**Qualifications**:

- Minimum 3 years’ experience implementing and supporting Information Security enterprise-level cloud-based tools, with track record of supporting enterprise-wide scalable solutions based on industry standard security concepts, technical controls, and best practice frameworks
- Minimum 2+ years cloud-based security control administration experience
- Multiple years of experience with cloud computing infrastructure (i.e., AWS, MS Azure, GCP, Alibaba/ Aliyun Cloud)
- Strong exposure, familiarity, knowledge, and experience managing cloud-based network and security controls (i.e., Firewalls, IDS/IPS, SIEMs, AV\Malware sandboxes, VPN's, vulnerability scanning tools, IAM\IDM, container security, etc.)
Strong oral and written communication skills appropriate for consultation with all levels of management
- The ability to thrive in a fast-paced, dynamic environment
- Strong team player, hands-on style, high level of energy, stamina, drive, and commendable organization and time management skills

Education
- Bachelor's degree in Information Systems, Computer Science, Information Security, and/or related work experience
- Professional qualifications are preferred: CISSP, SANS, GIAC, or similar

Illumina believes that everyone has the ability to make an impact, and we are proud to be an equal opportunity employer committed to providing employment opportunity regardless of sex, race, creed, color, gender, religion, marital status, domestic partner status, age, national origin or ancestry, physical or mental disability, medical condition, sexual orientation, pregnancy, military or veteran status, citizenship status, and genetic information.