Sr Information Security Engineer

Baylor Genetics is a clinical genetic testing laboratory that safeguards sensitive patient genomic and health information. The Senior Information Security Engineer serves as a senior technical leader responsible for designing, implementing, and operating security controls across systems, networks, endpoints, and cloud environments while leading detection and response, vulnerability management, privileged access management, Zero Trust, and incident response initiatives.

Responsibilities:

• Lead and operate the organizational detection and response capabilities, including SIEM/MDR and EDR/XDR, and SOAR (e.g., CrowdStrike or Microsoft Sentinel), tuning detections with organization specific policies and response actions
• Establish and mature a centralized, risk-based vulnerability management program with enforced patch SLAs, secure configuration baselines, and remediation of penetration test findings
• Design and implement identity and access security controls, including Privileged Access Management (PAM), Just-in-Time (JIT) access, MFA, SSO, Conditional Access, and least-privilege
• Advance the Zero Trust roadmap across identity, endpoints, networks, cloud, and data
• Respond to and investigate security incidents end to end — detection, containment, investigation, and recovery — in line with the incident response playbook, and lead post-incident reviews
• Implement and manage data protection controls for PHI/PII, including auto-classification and DLP (e.g., Microsoft Purview) across endpoints and cloud services
• Collaborate with IT, Privacy, Compliance, and application teams to embed security best practices into system designs, cloud deployments, and the SDLC

Requirements:

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field — or an equivalent combination of education and experience
• Minimum of 6–8 years of experience in information security engineering, security operations, or a related discipline
• Hands-on expertise with SIEM/MDR and EDR platforms (e.g., CrowdStrike, Microsoft Sentinel) and security event monitoring, triage, and tuning
• Strong knowledge of network security, firewalls, IDS/IPS, cryptography, authentication, and authorization principles
• Experience with vulnerability management, penetration test remediation, incident response, and endpoint/OS hardening
• Working knowledge of cloud security (Azure and/or AWS) and identity platforms (SSO, MFA, conditional access)
• Understanding of compliance frameworks and regulations relevant to healthcare data, including HIPAA, HITRUST, NIST, and GDPR
• Excellent written and verbal communication skills, with the ability to convey complex security concepts to technical and non-technical stakeholders
• Strong analytical and problem-solving skills with a risk-based, outcome-driven mindset
• Sound judgment and composure when responding to security incidents under pressure
• Collaborative, cross-functional approach with the ability to influence peers and mentor others
• Self-directed, detail-oriented, and able to prioritize competing demands in a fast-moving environment
• Remote role based in the USA
• Frequently required to sit and use hand and finger dexterity for prolonged periods
• May require periodic on-call availability to support security incident response
• Occasional travel for meetings, conferences, or audits
• Advanced certifications such as CISSP, CISM, GCIA, GCIH, or a cloud security specialty (e.g., Azure/AWS Security)
• Experience with privileged access management (PAM), SOAR, and Zero Trust architectures
• Familiarity with data loss prevention (e.g., Microsoft Purview) and data classification programs
• Prior experience in a healthcare, clinical laboratory, or other regulated (HIPAA/PHI) environment