Security Engineer

JOB SUMMARY

In this role, you will work with technical and nontechnical peers to achieve confidentiality, integrity and availability of data and systems. You will partner with the compliance team to ensure organizational compliance with applicable laws and regulations. In addition, you will work closely with the Enterprise IT team to ensure the security of endpoints, systems, and networks. The Information Security Engineer will also work with the product team to ensure the implementation of the security by design concept as an integral part of practices. 

You will be directly supported by the Head of Information Security to build, maintain, and enhance a functional and effective cybersecurity program to protect GeneDx and to enable the business to utilize technology in a secure way. 

MAJOR DUTIES AND RESPONSIBILITIES

• Design, configure, implement, monitor, and maintain security engineering service platforms to ensure the protection of systems and data.
• Provide expert security input during engineering, IT infrastructure, and application design reviews.
• Identify and address threats and attack vectors, including XSS, SQL injection, session hijacking, and social engineering.
• Create and maintain standard operating procedures (SOPs), security policy documents, and baselines.
• Conduct internal security audits across diverse business units.
• Configure, enhance, and analyze logs and events using SIEM solutions (e.g., Splunk, Azure Sentinel).
• Design and implement robust cloud security measures, including identity and access management, encryption, and network security.
• Conduct vulnerability assessments and penetration testing for web applications.
• Collaborate with development, operations, and IT teams to integrate security into the software development lifecycle (SDLC).
• Lead incident response efforts, including investigation, mitigation, and post-incident analysis to enhance organizational resilience.

EXPERIENCE

• 5-7 years of experience in public cloud security, including AWS, Azure, and Oracle Cloud Infrastructure (OCI).
• Hands-on experience with DevOps practices and security integration into CI/CD pipelines.
• Expertise in conducting HIPAA, SOC2, and SOX assessments/audits.
• Advanced experience with security tools such as next-gen firewalls, WAFs, endpoint security, encryption, email filtering, and data loss prevention solutions.
• Strong engineering skills with Windows Server environments, DNS, DHCP, Active Directory, and network switching.
• Experience in configuring and managing SIEM platforms like Splunk, SumoLogic or Azure Sentinel.
• Demonstrated experience implementing Risk Management Frameworks (e.g., NIST RMF or equivalent

CERTIFICATES, LICENSES, REGISTRATIONS

Certified Information Systems Security Professional (CISSP) - Required

~

Science - Minded, Patient - Focused. 

At GeneDx, we create, follow, and are informed by cutting-edge science. With over 20 years of expertise in diagnosing rare disorders and diseases, and pioneering work in the identification of new disease-causing genes, our commitment to genetic disease detection, discovery, and diagnosis is based on sound science and is focused on enhancing patient care.

Experts in what matters most. 

With hundreds of genetic counselors, MD/PhD scientists, and clinical and molecular genomics specialists on staff, we are the industry’s genetic testing experts and proud of it. We share the same goal as healthcare providers, patients, and families: to provide clear, accurate, and meaningful answers we all can trust.

SEQUENCING HAS THE POWER TO SOLVE DIAGNOSTIC CHALLENGES.

From sequencing to reporting and beyond, our technical and clinical experts are providing guidance every step of the way:

TECHNICAL EXPERTISE

• High-quality testing: Our laboratory is CLIA certified and CAP accredited and most of our tests are also New York State approved.
• Advanced detection: By interrogating genes for complex variants, we can identify the underlying causes of conditions that may otherwise be missed.

CLINICAL EXPERTISE

• Thorough analysis: We classify variants according to our custom adaptation of the most recent guidelines. We then leverage our rich internal database for additional interpretation evidence.
• Customized care: Our experts review all test results and write reports in a clear, concise, and personalized way. We also include information for research studies in specific clinical situations.
• Impactful discovery: Our researchers continue working to find answers even after testing is complete. Through both internal research efforts and global collaborations, we have identified and published hundreds of new disease-gene relationships and developed novel tools for genomic data analysis. These efforts ultimately deliver more diagnostic findings to individuals.

Learn more About Us here.

Our Culture

At GeneDx, we are dedicated to cultivating an environment where creativity and innovation thrive. We believe in the power of community and collaboration, where diverse perspectives are embraced, and every voice contributes to our shared success. Our team is a vibrant mix of professionals who challenge and support each other in equal measure, fostering growth both personally and professionally. When you join us, you're not just taking on a job—you're joining a movement. A movement that champions curiosity, embraces change, and believes in making an impact, one patient at a time. Cultural principles we live by:  

• Be bold in our vision & brave in our execution. 
• Communicate directly, with empathy. 
• Do what we say we're going to do.  
• Be adaptable to change.  
• Operate with a bias for action.    

Benefits include:

• Paid Time Off (PTO)
• Health, Dental, Vision and Life insurance
• 401k Retirement Savings Plan
• Employee Discounts
• Voluntary benefits

GeneDx is an Equal Opportunity Employer.

All privacy policy information can be found here.