Sr Information Security Engineer

CareDx, Inc. is a leading precision medicine solutions company focused on the discovery, development, and commercialization of clinically differentiated, high-value healthcare solutions for transplant patients and caregivers. CareDx offers products, testing services, and digital healthcare solutions along the pre- and post-transplant patient journey, and is the leading provider of genomics-based information for transplant patients.

We are seeking a highly skilled and proactive Senior Security Engineer with expertise in cybersecurity tools and practices. The ideal candidate will bring a deep understanding of SIEM, EDR, and cloud security. This role requires a strong background in vulnerability management, incident response, and the implementation of robust security tools.

Responsibilities:

• Security Operations & Incident Response: Lead and manage security incidents, quickly identifying, analyzing, and mitigating threats. Implement efficient incident response processes to ensure minimal impact on operations.
• SIEM and EDR Management: Oversee and fine-tune SIEM and EDR solutions to enhance threat detection, monitoring, and response capabilities.
• Vulnerability Scanning & Management: Conduct regular vulnerability scans, analyze results, and work on remediation efforts to minimize security risks across systems and applications.
• Security Tool Implementation: Design, deploy, and optimize a range of security tools for threat detection, endpoint protection, and continuous monitoring to strengthen the organization's security posture.
• Penetration Testing: Plan and conduct penetration tests to identify vulnerabilities, assess potential impacts, and develop strategies for improved resilience.
• Cloud Security: Manage and implement security measures for cloud environments, ensuring secure configuration and monitoring for AWS, Azure, or GCP.
• Programming for Security Automation: Utilize advanced programming skills to create automation scripts, streamline threat detection, and develop custom security solutions as needed.

Qualifications:

• Bachelors degree in Computer Science, Information Technology, or a related field
• Minimum 7 years experience in cybersecurity, with at least 5 years in security engineering or architect role
• Certification: CISSP or equivalent security certifications
• Experience with SIEM and EDR tools 
• Deep expertise in programming languages (e.g., Python, Java, etc.) for scripting and security automation
• Proven experience in security incident response, vulnerability scanning, and penetration testing
• In-depth knowledge of cloud security practices across major cloud providers (AWS, Azure, GCP)
• Strong understanding of security frameworks and compliance standards, including NIST, ISO27001, and SOC 2

Additional Details:

Every individual at CareDx has a direct impact on our collective mission to improve the lives of organ transplant patients worldwide. We believe in taking great care of our people, so they take even greater care of our patients.

Our competitive Total Rewards package includes:

• Competitive base salary and incentive compensation
• Health and welfare benefits including a gym reimbursement program
• 401(k) savings plan match
• Employee Stock Purchase Plan
• Pre-tax commuter benefits
• And more!

In addition, we have a Living Donor Employee Recovery Policy that allows up to 30 days of paid leave annually to a full-time employee who makes the selfless act of donating an organ or bone marrow.

With products that are making a difference in the lives of transplant patients today and a promising pipeline for the future, it’s an exciting time to be part of the CareDx team. Join us in partnering with transplant patients to transform our future together.

CareDx, Inc. is an Equal Opportunity Employer and participates in the E-Verify program.

By proceeding with our application and submitting your information, you acknowledge that you have read our U.S. Personnel Privacy Notice and consent to receive email communication from CareDx.

******** We do not accept resumes from headhunters, placement agencies, or other suppliers that have not signed a formal agreement with us.

#LI-Hybrid #LI-Onsite