10x Genomics was founded to deliver powerful and reliable tools that fuel key scientific discoveries and drive exponential progress in our mastery of biology to advance human health. Our talented team has a distinguished record of creating innovative instruments, reagents, and software that analyze biological systems at a resolution that matches the complexity of biology. About the role: Our team is looking for a Cloud Security Engineer with extensive security and cloud knowledge to help drive 10x Genomics’ efforts in creating and expanding our SaaS products and internal services. The engineer that we hire for this role is responsible for the overall security of the 10x Genomics cloud environments and works closely with software engineering and Site Reliability Engineers (SRE) to build and maintain a secure, resilient cloud platform. As a Cloud Security Engineer, you will be the technical subject matter expert for cloud security, identity, and cloud based incident response. You will perform design reviews, architect secure cloud resources, and conduct technical security assessments to highlight risk and help engineering teams improve their security posture. You will be a security leader within the company, ensuring security is a foundational component of all our cloud services. This position requires deep technical knowledge across a range of disciplines and the ability to work hands-on across a wide variety of technology stacks. We take security very seriously, and protecting our customers is our highest priority. If you are a self-starter who is passionate about security and is excited to work in a highly collaborative environment, we encourage you to apply. What you will be doing <ul> <li>Serve as the primary technical security resource on all cloud development, providing expert guidance on secure architecture and deployment.</li> <li>Architect, implement, and maintain a comprehensive cloud identity and access management (IAM) strategy, enforcing principles of least privilege, federation, and privileged access management.</li> <li>Create, review and update cloud-based IAM policies to make sure access policies are least privileged, properly scoped, and governed by version control (Terraform + GitHub)</li> <li>Lead and contribute to cloud security incident response activities, including detection, investigation, containment, eradication, and post-mortem analysis.</li> <li>Monitor security alerts and respond in a timely manner to address issues directly or in coordination with other teams.</li> <li>Periodically carry out threat modeling exercises, penetration tests, and security scanning to verify security posture and identify new attack surfaces.</li> <li>Identify, recommend, and assist with the remediation of cloud control deficiencies and security gaps.</li> <li>Create and maintain documentation for cloud security architecture, processes, standards, and runbooks.</li> </ul> Minimum Requirements <ul> <li>Proven, extensive expertise in designing, building, and securing large-scale public cloud infrastructure (AWS preferred).</li> <li>Demonstrable experience leading or significantly contributing to cloud incident response efforts, including forensics and analysis.</li> <li>Expert-level understanding of identity and access management (IAM) concepts, including federation (SAML/OIDC), role-based access control (RBAC), and privileged access management (PAM) in a cloud context.</li> <li>Proficiency in at least one programming language, such as Python or Go.</li> <li>5 years of experience in information security, with at least 3 years in Cloud Security</li> <li>Experience with Terraform,GitHub or similar for cloud infrastructure management.</li> <li>Experience with cloud and web application security standards (CIS benchmarks, OWASP ASVS, SANS 25, etc.)</li> </ul> Preferred Skills and Experience <ul> <li>Experience with Cloud security products, such as GuardDuty, CloudTrail, IAM Access Analyzer, Wiz, and Security Hub.</li> <li>Experience with Infrastructure-as-Code tools, such as Terraform and Ansible.</li> <li>Experience with SIEM, SOAR, and vulnerability management products.</li> <li>Experience with container security (Docker, Kubernetes).</li> <li>In-depth technical and foundational knowledge of software engineering, computer systems, security engineering, authentication, and/or applied cryptography.</li> <li>Experience securing operating systems, networks, and low-level infrastructure. </li> <li>Experience with attacker tactics, techniques, and procedures, and corresponding mitigation methods.</li> <li>Excellent written and verbal communications skills.</li> </ul><div>Below is the base pay range for this full-time position.  The actual base pay will depend on several factors unique to each candidate, including one’s skills, qualifications, and experience.  At 10x, base pay is also just one component of the Company’s total compensation package.  This role is also eligible for 10x’s equity grants, its comprehensive health and retirement benefit programs, and its annual bonus program or sales incentive program. During the hiring process, your 10x recruiter can share more about the Company’s total compensation package.Pay Range<div>$172,500—$233,300 USD</div></div><div>About 10x Genomics At 10x Genomics, accelerating our understanding of biology is more than a mission for us. It is a commitment. This is the century of biology, and the breakthroughs we make now have the potential to change the world. We enable scientists to advance their research, allowing them to address scientific questions they did not even know they could ask. Our tools have enabled fundamental discoveries across biology including cancer, immunology, and neuroscience. Our teams are empowered and encouraged to follow their passions, pursue new ideas, and perform at their best in an inclusive and dynamic environment. We know that behind every scientific breakthrough, there is a deep infrastructure of talented people driving the life sciences industry and making it possible for scientists and clinicians to make new strides. We are dedicated to finding the very best person for every aspect of our work because the innovations and discoveries that we enable together will lead to better technologies, better treatments, and a better future. Find out how you can make a 10x difference.  Individuals seeking employment at 10x Genomics are considered without regards to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, or sexual orientation, or any other characteristic protected by applicable law. 10x does not accept unsolicited applicants submitted by third-party recruiters or agencies. Any resume or application submitted to 10x without a vendor agreement in place will be considered unsolicited and property of 10x, and 10x will not pay a placement fee. <a href="https://www.linkedin.com/company/10xgenomics/" target="_blank"></a>    <a href="https://twitter.com/10xgenomics" target="_blank"></a></div>

10X Genomics

Senior Security Engineer, Cloud

10X Genomics