Senior Information Security Engineer Cloud - Hybrid

Caris Life Sciences - Irving, TX

Full-time - Senior

Irving, TX

Professional, Scientific, and Technical Services

About the position

The Senior Information Security Engineer - Cloud at Caris Life Sciences is responsible for implementing and enforcing IT security policies and procedures related to cloud infrastructure and applications. This role involves investigating security incidents, collaborating with various teams to ensure compliance with information security practices, and enhancing the skills of the Cloud Ops team. The engineer will work closely with cross-functional teams to deliver high-quality solutions while maintaining awareness of engineering processes and regulatory requirements.

Responsibilities

• Utilize various network security tools within the Caris environment including Identity and Access Governance applications, Email Security Appliances, Anti-Virus management software, and Intrusion Protection Systems.
• Engage directly with engineers to troubleshoot provisioning and security related issues, perform access and activity audits, and assist with projects and resource reviews.
• Maintain advanced knowledge of the Security Framework (i.e. People, Process, and Technology).
• Collaborate with the Cloud Ops team to enhance their skills and experience and address Information Security compliance.
• Work closely with Product Management, Software Engineering, Data Science, and Infrastructure teams to align objectives and deliver high-quality solutions.
• Conduct architecture reviews and generate security process improvements.
• Stay updated with AWS best practices and new technologies.
• Collaborate with cross-functional teams to improve product quality, security, and performance.
• Make technical decisions when necessary and facilitate technical decision-making within the team.
• Ensure compliance with regulatory requirements and best practices in a regulated environment.

Requirements

• Bachelor's degree or equivalent required.
• 8+ years of Cloud experience (inclusive of time as an individual contributor).
• 5-10 years of experience in Engineering/Tech/Software/InfoSec with a focus on cloud network security.
• Experience as an Individual Contributor in a team working with Amazon Web Services.
• Strong experience in architecting and delivering scalable cloud-based solutions.
• Solid understanding of DevOps principles, CI/CD pipelines, and infrastructure automation.
• Knowledge of Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) tools and methodologies.
• Proficiency with AWS security tools such as GuardDuty, Config, IAM, and cloud security tools like Wiz.
• Practical experience in implementing and supporting DevSecOps practices.
• Self-motivated and able to work in a fast-paced environment.
• Excellent written and verbal communication skills.

Nice-to-haves

• Bachelor's degree in an IT related discipline or additional equivalent experience.
• CISSP or equivalent certification is recommended.
• AWS Certified Security - Specialty.
• Relevant experience in the Healthcare, Life Sciences, or Genomics industry.
• Familiarity with multi-cloud governance and architecture, particularly Amazon Web Services (AWS).
• Knowledge of relational databases (e.g., MySQL, Postgres) and scripting languages (e.g., Python, Shell).
• Experience with CI/CD tools such as GitLab CI and GitHub Actions.
• Understanding of modern DevSecOps practices - git, CI/CD, infrastructure as code - and their integration with technologies such as Kubernetes.
• Infrastructure architecture knowledge, including the relationships between databases, cloud services, and application servers.
• Previous work in a regulated environment.
• Technical Mentoring.
• Eager self-starter & self-learner.