Product Security Architect / Sr Architect

What if the work you did every day could impact the lives of people you know? Or all of humanity?

At Illumina, we are expanding access to genomic technology to realize health equity for billions of people around the world. Our efforts enable life-changing discoveries that are transforming human health through the early detection and diagnosis of diseases and new treatment options for patients.

Working at Illumina means being part of something bigger than yourself. Every person, in every role, has the opportunity to make a difference. Surrounded by extraordinary people, inspiring leaders, and world changing projects, you will do more and become more than you ever thought possible.

Reporting to the Director of Product Security, the Product Security Architect / Senior Architect, is a critical role at Illumina in ensuring the manufacturing of our physical medical devices and software solutions development are secure. This position requires experience, knowledge, and skills in the areas of product security and software development. The individual will be responsible for leading the pre-market security initiatives of solutions including Illumina medical instruments and connected software before they are released to customers.

Position Summary:

The Product Security Team is looking for a talented Senior Product Security Architect to help us strengthen our world-class business. As a valued team member, you will define, identify, evaluate, and maintain controls, providing visibility into the health, and security of our products.  

You will collaborate closely with engineering, development, and technology groups to define and maintain medical device security and lead the change, ensuring secure posture for Illumina products in Premarket and Postmarket phases of the product. The Senior Product Security Architect will be responsible for introducing security controls, processes and testing throughout entire product SDLC, from hardware selection to decommissioning of the device.  You are highly motivated to integrate security capabilities into continuous release planning and execution for all Illumina products. 

Responsibilities:

• Drive Secure Design working in close partnership with Development Teams.
• Introduce security requirements at system and software level and work with development team to ensure correct implementation of them.
• Partner with Development Teams and deliver threat models on the software development projects, allowing to identify and prioritize cybersecurity requirements.
• Partner with Verification Team, guide and mentor, ensuring that verification of cybersecurity requirements is performed correctly and with the full coverage.
• Partner with Development and Quality team, drive and deliver Cybersecurity Risk Assessment on the project, ensuring all risks are identified, prioritized and addressed as expected.
• Drive and executed/facilitate all varieties of cybersecurity testing: from penetration testing to vulnerability scans, ensuring along the way that all findings are triaged/root caused/addressed appropriately.
• Work tirelessly on improving integration of Product Security into SDLC, building the trust, expertise and process efficiencies.
• Drive security initiatives by example, be knowledgeable and passionate, be strong communicator and never miss an opportunity to educate and train partner teams on the topics of Product Security

Requirements:

• Experience in application and product security coupled with a strong depth of understanding and knowledge of relevant technology stacks.
• Experience with building secure designs for software products or perform penetration testing for software products.
• Ability to understand code and system configurations and being able to recommend modifications to those, to ensure better security posture.
• Very in-depth of understanding of software development and the ability to effectively build and communicate security designs, taking in consideration software design context.
• Understanding of three or more security domains (such as for example, platform security, network security, application security, etc.)
• Understanding of OWASP Top 10 Web Application Vulnerabilities.
• Coding experience with two or more programming languages
• Experience with software security tools such as nMap, Wireshark, Kali Linux, OpenVAS
• Effective communicator delivering key messages to team stakeholders, and business partners using informative clear verbal and written communications.
• Experience with a medical device manufacturer or other relevant Regulated industry highly preferable

Education:

• Bachelor’s degree in computer science, engineering, or relevant work experience.
• Professional qualifications are preferred such as: C