Information Security Engineer - Hybrid

Caris Life Sciences•Phoenix, AZ

1d•Hybrid

About The Position

At Caris, we understand that cancer is an ugly word—a word no one wants to hear, but one that connects us all. That’s why we’re not just transforming cancer care—we’re changing lives. We introduced precision medicine to the world and built an industry around the idea that every patient deserves answers as unique as their DNA. Backed by cutting-edge molecular science and AI, we ask ourselves every day: “What would I do if this patient were my mom?” That question drives everything we do. But our mission doesn’t stop with cancer. We're pushing the frontiers of medicine and leading a revolution in healthcare—driven by innovation, compassion, and purpose. Join us in our mission to improve the human condition across multiple diseases. If you're passionate about meaningful work and want to be part of something bigger than yourself, Caris is where your impact begins. Position Summary The Information Security Engineer will be responsible for implementing, managing, and overseeing our organization's information security systems to safeguard our data, infrastructure, and assets from security threats. You will collaborate with cross-functional teams to ensure the security and integrity of our systems, networks, and applications.

Requirements

High School Diploma.
3-4 years of experience in a cybersecurity role.
Relevant certifications such as CISSP, CISM, CEH, or GIAC are highly desirable.
Strong familiarity with Rapid7, Sentinal1, iBoss, QRadar, DLP, AWS Security tools, and Azure security components.
Understanding of microservices architecture and container orchestration, preferably with AWS EKS.
Knowledge of generative AI and its applications in enhancing cybersecurity defenses is a plus.
Excellent problem-solving skills and the ability to work under pressure.
Strong communication skills and the ability to work effectively in a team environment.
Analytical skills to review complex reports for anomalies.
Experience troubleshooting complex resource provisioning or security issues.
Proficiency with general computer software.

Nice To Haves

Bachelor's Degree in an IT related discipline or additional equivalent experience.
CISSP or equivalent certification is recommended.
Strong attention to detail.
Strong verbal and written communication skills.
Experience with Python programming for security automation and scripting tasks.
Communication - Proficient verbal and written communication skills. Willingness to share and receive information and ideas from all levels of the organization in order to achieve the desired results.
Teamwork - Commitment to the successful achievement of team and organizational goals through a desire to participate with and help other members of the team.
Customer Service Focus - Demonstrate a focus on listening to and understanding client/customer needs, and then exceeding service and quality expectations for a positive client/customer experience.

Responsibilities

Work with InfoSec team on running regular scans using Rapid7 to identify vulnerabilities and assist with the implementation of recommended patches and remediations.
Maintain an up-to-date understanding of emerging threats, vulnerabilities, and best practices.
Participate in cybersecurity incident response activities and help manage the aftermath of security breaches or attacks.
Utilize different tool for network traffic analysis to detect anomalies and potential threats.
Assist in malware and virus detection, containment, eradication, and cleanup processes.
Collaborate with business units to identify and prioritize critical assets and systems.
Respond to social engineering attacks and contribute to the development of strategies to mitigate future risks.
Assist teams with day-to-day InfoSec incoming tickets and resolving issues in a timely manner
Develop and enforce security policies, standards, and procedures across the organization.
Work with the Cloud (AWS/Azure) teams monitor different environments using different tools to ensure all systems operate securely and efficiently.
Support the deployment and management of microservices architectures, including AWS EKS.
Stay informed about the latest in generative AI technologies and their implications for cybersecurity.