Senior Security Engineer

View all jobs

Senior Security Engineer

United States • North America • Latin America (LATAM) • South America • Europe

Engineering

Remote

Full-time

Sequencing is building the interface between humanity and its DNA.

Using clinical-grade whole genome sequencing, AI, and a rapidly expanding ecosystem of genomic applications, we help people better understand themselves, their health, and their future through their DNA.

The human genome is one of the most valuable and underutilized resources in the world. Our mission is to transform the human genome into a lifelong source of personalized guidance and build the trusted home for every genome on Earth.

As the world’s largest direct-to-consumer whole genome sequencing platform, Sequencing is helping define the future of AI-powered personalized health.

We’re a profitable, venture-backed, fully remote company building category-defining products that help people better understand themselves through their DNA.

The Position

As our first dedicated Senior Security Engineer, you will join a remote, global health‑tech team that works at the intersection of genomics, AI, and consumer health. You will report to the Head of Engineering, partner closely with DevOps, bioinformatics, and developers, and help protect highly sensitive health and genomic data as we grow.

You will build security practices and your work will directly shape how the company operates and earns customer and partner trust. Success in this role means being proactive, collaborative, clear in your communication, and comfortable executing in a fast-moving, startup environment while partnering across functions and time zones.

The Impact

• Lead security testing for our web apps, APIs, cloud (AWS/OCI), Kubernetes, and on‑prem servers, and clearly document vulnerabilities you find.
• Build security into our CI/CD pipelines with DevOps, including code and app scanning and stronger secrets management.
• Work with bioinformatics to secure genomic data pipelines and protect PHI/PII in line with HIPAA requirements.
• Set up and run security monitoring, alerting, and incident response, with practical playbooks and runbooks the team can follow.
• Lead the technical work needed for HIPAA, SOC 2, and ISO 27001 readiness and future audits.
• Help design and improve logging and SIEM use so the team can spot and respond to threats faster.
• Translate security findings into clear, prioritized tasks that engineering and DevOps teams can execute.
• Partner with engineers, DevOps, and bioinformatics so security is built into how we design, build, and ship systems.
• Contribute to threat modeling and secure design discussions for new and existing services.
• Maintain clear, concise security documentation, including standards, guidelines, and incident procedures.
• Support vendor and third-party security assessments by reviewing findings and driving remediation with the team.
• Provide input into security aspects of our architecture and infrastructure decisions.
• Support security aspects of our performance tasks and assessments, including translating real-world attack methods into learnings for the team.
• Help raise security awareness across the company by sharing best practices with engineers and partner teams.
• Collaborate across time zones and functions to plan, prioritize, and communicate security work and trade‑offs.

Dominant and Recessive Traits

• 8+ years in security engineering, DevSecOps, or infrastructure security roles.
• Strong hands-on penetration testing and vulnerability discovery skills, using both manual methods and tools. OSCP, OSCE, or equivalent certifications are a plus; we value candidates with real-world offensive experience, not just institutional credentials.
• Deep experience securing AWS and OCI cloud and Kubernetes (RBAC, IAM, network policies, containers, secrets), as well as bare metal and on-premises server environments.
• Experience adding and tuning security tools in CI/CD (such as Semgrep, CodeQL, OWASP ZAP, Burp Suite).
• Comfortable with tools like Burp Suite, Metasploit or similar, OWASP ZAP, Semgrep or CodeQL, CloudTrail, Falco, Terraform, Docker, Git/GitHub, Cloudflare, and Google Workspace.
• Experience with SIEM or log aggregation and real‑time detection and monitoring.
• Familiarity with HIPAA, SOC 2, and how to protect PHI/PII in regulated or high‑sensitivity environments.
• Clear written and verbal communication, especially for explaining security issues and recommendations to technical teams.
• Ability to influence and collaborate with engineering, DevOps, and data teams without formal authority.
• Comfortable working independently in a remote, fast-moving startup with limited existing security processes.
• Experience with eCommerce and checkout security, including securing payment flows, cart and order APIs, and protecting against fraud, skimming attacks, and checkout abuse.
• Experience with vulnerability research, responsible disclosure, or red team operations is a strong plus.

Include "kitten" in your resume

Benefits Overview

• Comprehensive medical, dental, and vision insurance coverage
• 401(k) with company matching
• Paid time off (PTO)
• Paid volunteer time off
• Fully remote work with home office stipend
• Parental bonding leave
• Clinical-grade whole genome sequencing for you and your family (private and confidential)

Join Sequencing

• Redefine how people understand themselves through their DNA
• Build category-defining products alongside scientists, engineers, and innovators
• Contribute to technology that will improve and extend millions of lives
• Shape one of the most important emerging categories in AI and healthcare

Sequencing Inc. is an equal opportunity employer. All aspects of employment, including the decision to hire, promote, discipline, or discharge, will be based on merit, competence, performance, and business needs. We do not discriminate based on race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, veteran status, or any other status protected under federal, state, or local law. Where required by applicable law, candidates may request a reasonable accommodation or an alternative selection process by contacting joinus@sequencing.com .

Sequencing Inc. may use artificial intelligence (AI) or automated tools as part of the recruiting and hiring process, including for application screening and candidate evaluation. These tools may analyze information provided in your application materials or during the hiring process.

All legitimate Sequencing roles are posted on our official careers page and require you to apply through our company application portal. If a role claiming to be with Sequencing asks you to apply or communicate outside of those channels, it is not an authentic opportunity with our team. During our hiring process, we or our recruitment partners will never ask you to send money, purchase equipment, or share bank, credit card, or Social Security information before a verified offer. We also will not make same day offers without interviews or ask you to communicate only through informal messaging apps. If you believe someone is misusing our name in a fake posting, please report it to the job board or verify the posting by contacting careers@sequencing.com .

Ready to apply?

Powered by

First name *

Last name *

Email *

LinkedIn URL *

Phone number *

Location *

Resume *

Click to upload or drag and drop here

Working location *

This is a remote based role and we often have the flexibility to hire international (non-US) candidates, please refer to the job description for confirmation of this.

Please state your current location below:

US-Based, not requiring sponsorship

US-Based, requiring future sponsorship

Non-US, remote employment desired

How did you hear about this role? *

When is the earliest you could start in this role? *

• Standard Processing: 2+ weeks from first call to decision.
• Expedited Processing: Streamlined interviews in under 2 weeks.
• Ultra Rapid Processing: Immediate Start

Standard Processing

Expedited Processing

Ultra Rapid Processing

If you are a referral, please share who referred you. *

Share your biggest career achievement to date. *

Experience In: Select All That Apply *

Security Engineering

DevSecOps

Infrastructure security

Hands-on penetration testing

Vulnerability discovery/vulnerability research

Responsible disclosure

eCommerce and checkout security

Startup Experience

Experience In: Select All That Apply *

HIPAA

SOC 2

PHI/PII in regulated or high‑sensitivity environments

OSCE

OSCP

By applying you agree to Gem's terms and privacy policy.

Save your info to apply to other roles faster & help employers reach you.

Apply and saveApply without saving

Req ID: R43