Job description

JOB SUMMARY

In this role, you will work with technical and nontechnical peers to achieve confidentiality, integrity and availability of data and systems. You will partner with the compliance team to ensure organizational compliance with applicable laws and regulations. In addition, you will work closely with the Enterprise IT team to ensure the security of endpoints, systems, and networks. The Information Security Engineer will also work with the product team to ensure the implementation of the security by design concept as an integral part of practices.

You will be directly supported by the Head of Information Security to build, maintain, and enhance a functional and effective cybersecurity program to protect GeneDx and to enable the business to utilize technology in a secure way.

MAJOR DUTIES AND RESPONSIBILITIES

Design, configure, implement, monitor, and maintain security engineering service platforms to ensure the protection of systems and data.
Provide expert security input during engineering, IT infrastructure, and application design reviews.
Identify and address threats and attack vectors, including XSS, SQL injection, session hijacking, and social engineering.
Create and maintain standard operating procedures (SOPs), security policy documents, and baselines.
Conduct internal security audits across diverse business units.
Configure, enhance, and analyze logs and events using SIEM solutions (e.g., Splunk, Azure Sentinel).
Design and implement robust cloud security measures, including identity and access management, encryption, and network security.
Conduct vulnerability assessments and penetration testing for web applications.
Collaborate with development, operations, and IT teams to integrate security into the software development lifecycle (SDLC).
Lead incident response efforts, including investigation, mitigation, and post-incident analysis to enhance organizational resilience.

EXPERIENCE

5-7 years of experience in public cloud security, including AWS, Azure, and Oracle Cloud Infrastructure (OCI).
Hands-on experience with DevOps practices and security integration into CI/CD pipelines.
Expertise in conducting HIPAA, SOC2, and SOX assessments/audits.
Advanced experience with security tools such as next-gen firewalls, WAFs, endpoint security, encryption, email filtering, and data loss prevention solutions.
Strong engineering skills with Windows Server environments, DNS, DHCP, Active Directory, and network switching.
Experience in configuring and managing SIEM platforms like Splunk, SumoLogic or Azure Sentinel.
Demonstrated experience implementing Risk Management Frameworks (e.g., NIST RMF or equivalent

CERTIFICATES, LICENSES, REGISTRATIONS

Certified Information Systems Security Professional (CISSP) - Required

Science - Minded, Patient - Focused.

At GeneDx, we create, follow, and are informed by cutting-edge science. With over 20 years of expertise in diagnosing rare disorders and diseases, and pioneering work in the identification of new disease-causing genes, our commitment to genetic disease detection, discovery, and diagnosis is based on sound science and is focused on enhancing patient care.

Experts in what matters most.

With hundreds of genetic counselors, MD/PhD scientists, and clinical and molecular genomics specialists on staff, we are the industry’s genetic testing experts and proud of it. We share the same goal as healthcare providers, patients, and families: to provide clear, accurate, and meaningful answers we all can trust.

SEQUENCING HAS THE POWER TO SOLVE DIAGNOSTIC CHALLENGES.

From sequencing to reporting and beyond, our technical and clinical experts are providing guidance every step of the way:

TECHNICAL EXPERTISE

High-quality testing: Our laboratory is CLIA certified and CAP accredited and most of our tests are also New York State approved.
Advanced detection: By interrogating genes for complex variants, we can identify the underlying causes of conditions that may otherwise be missed.

CLINICAL EXPERTISE

Thorough analysis: We classify variants according to our custom adaptation of the most recent guidelines. We then leverage our rich internal database for additional interpretation evidence.
Customized care: Our experts review all test results and write reports in a clear, concise, and personalized way. We also include information for research studies in specific clinical situations.
Impactful discovery: Our researchers continue working to find answers even after testing is complete. Through both internal research efforts and global collaborations, we have identified and published hundreds of new disease-gene relationships and developed novel tools for genomic data analysis. These efforts ultimately deliver more diagnostic findings to individuals.

Learn more About Us here.

~

Benefits include: