Staff Software Engineer - Cybersecurity

What if the work you did every day could impact the lives of people you know? Or all of humanity?

At Illumina, we are expanding access to genomic technology to realize health equity for billions of people around the world. Our efforts enable life-changing discoveries that are transforming human health through the early detection and diagnosis of diseases and new treatment options for patients.

Working at Illumina means being part of something bigger than yourself. Every person, in every role, has the opportunity to make a difference. Surrounded by extraordinary people, inspiring leaders, and world changing projects, you will do more and become more than you ever thought possible.

Position Summary:                    

The Cybersecurity-Focused Staff Software Engineer will support the Instrument Software team in improving its cybersecurity maturity. There are three main areas where this support will be provided. The first is helping to understand, design, and test product features and CI/CD infrastructure relating to cybersecurity. The second is working with the various teams within instrument software in identifying, documenting, analyzing, and addressing security vulnerabilities discovered in the team's software products. The third is executing required activities and generating documentation needed for milestones and the release process of the team's software products.

Position Responsibilities:

• Conduct and participate in threat modeling and threat model analysis result evaluation
• Provide cybersecurity expertise to architecture design
• Help design software features that increase our security maturity
• Educate the software team in software security principles, tools, libraries
• Document these software security principles, tools, libraries for the team's reference
• Deliver security-related release documentation
• Coordinate with the Illumina Product Security group in order to receive input and deliver status updates
• Work with the Illumina DevOps group to secure our continuous integration environment
• Ensure our development teams are properly implementing security features
• Partner with the Illumina  on-market maintenance development team(s) to assess and triage discovered vulnerabilities
• Manage code scanning tools and participate in analysis of code scan results
• Assist the software team in its software and OS patching activities and feature design
• Participate as a highly capable contributing member of a software engineering organization by:
  • Collaborating with product owners and other application developers to design, code, and maintain high quality, cloud-based applications against established processes in a scrum team setting
  • Working with software teams to ensure alignment of architecture to user requirements
  • Occasionally providing technical assistance to escalated production issues
  • Maintaining awareness of industry trends and evaluate applicability of new software technologies to platform development efforts
  • Providing technical leadership to an Agile team if required

Listed responsibilities are an essential, but not exhaustive list, of the usual duties associated with the position. Changes to individual responsibilities may occur due to business needs.

Position Requirements:

• Extensive experience working with security-related software features and tools
• Passion for securing software products with industry best practices and well-established processes
• Extensive knowledge and experience with C#, .Net
• Deep understanding of SOA, web security architecture, REST APIs, event-driven architecture, and other architectural patterns
• Proficient with source control management repositories (such as GIT, SVN, etc.) and CM practices
• Good understanding of object oriented analysis and design
• Demonstrated success in collaborating in a fast-paced team environment and delivering high-quality software products using established agile development methodologies (such as Scrum, Kanban, etc.) against formal schedules

All listed requirements are deemed as essential functions to this position; however, business conditions may require reasonable accommodations for additional task and responsibilities.

Preferred Experience/Education/Skills:

• Experience as security engineer in a medical or regulated industry
• Experience with security process, FDA Security guidance, AAMI TIR 57, and NIST standards
• Applied knowledge of security protocols/tools (TLS, SSH, GPG, crypto algorithms, etc.), PKI and IAM
• Keeps up to date on security-related news and publications
• Experience with hardening systems and interfaces – Windows and Linux
• Hands on experience with sec