Principal Cybersecurity Engineer

Pacific Biosciences•Menlo Park, CA

1d•$195,900 - $293,900•Onsite

About The Position

PacBio is seeking a Principal Cybersecurity Engineer to strengthen and mature its security program, protecting sensitive information such as human genomic data, proprietary chemistry and instrument designs, and customer research. The role owns security architecture and engineering across PacBio’s network, storage, high-performance computing (HPC), and cloud environments. The engineer designs and implements controls, hardens systems, and ensures controls are effective for auditors, customers, and potential attackers. The position serves as the technical lead for PacBio’s ISO 27001 certification and security-related SOX IT general controls, translating requirements into practical, well-evidenced controls that support the work of scientific, engineering, and operations teams. This senior individual contributor sets technical direction for cybersecurity and reports to the Head of Information Technology. It combines hands-on engineering, architecture, audit work, and executive communication, while requiring leadership across IT, R&D, Software Engineering, Operations, and Finance without direct authority. The position is listed as onsite in Menlo Park, California. Non-field-based employees are required to work onsite Monday through Thursday, with Friday work from home; some employees may be required to work fully onsite. The employee may also need to visit and work at other PacBio locations as required. Salary range: $195,900 to $293,900. Candidates must be authorized to work in the United States without present or future sponsorship.

Requirements

Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field, or equivalent practical experience.
At least 12 years of experience in cybersecurity engineering, security architecture, or infrastructure security, including at least 5 years as a senior technical lead or architect responsible for security across enterprise environments.
Demonstrated experience as a technical lead for an ISO 27001 implementation, certification, or surveillance audit.
Experience designing, operating, and evidencing SOX IT general controls in a public company.
Deep hands-on expertise in network security architecture, including segmentation, next-generation firewalls, VPN/ZTNA, and secure remote access.
Proven experience securing enterprise and research storage, Linux-based HPC environments, and at least one major cloud platform: AWS, Azure, or GCP.
Hands-on experience hardening servers, endpoints, network devices, and IoT devices using CIS Benchmarks or equivalent baselines, supported by configuration management and vulnerability management tools.
Hands-on experience with modern EDR platforms and SIEM, including leading security incidents end to end.
Proficiency in scripting and automation using Python, PowerShell, or Bash, and infrastructure as code using Terraform or Ansible.
Working knowledge of security frameworks such as NIST CSF, NIST SP 800-53, CIS Controls, and SOC 2.
Excellent written and verbal communication skills and demonstrated ability to explain risk clearly and influence engineers, executives, and auditors without direct authority.
Current authorization to work in the United States without the need for present or future sponsorship.

Nice To Haves

Experience with secure software development practices, including secure SDLC, threat modeling, and integrating SAST, SCA, secrets scanning, and container security into CI/CD pipelines.
Experience in life sciences, genomics, biotech, medical devices, or another regulated industry, including protecting genomic or health data under HIPAA, GDPR, or CCPA/CPRA.
Experience securing connected devices, embedded systems, or OT and manufacturing environments.
Experience applying AI and LLM-driven automation to security operations with appropriate human oversight and guardrails.
Certifications such as CISSP, CISM, CCSP, ISO 27001 Lead Implementer or Lead Auditor, GIAC, or a cloud security certification.

Responsibilities

Define and own PacBio’s security architecture, standards, and multi-year engineering roadmap across enterprise, HPC, and cloud environments; prioritize work based on risk and track measurable outcomes.
Serve as technical lead for the ISO 27001 program by helping define ISMS scope, conducting risk assessments, implementing and evidencing Annex A controls, maintaining the Statement of Applicability, and preparing for internal, certification, and surveillance audits.
Own security-related IT general controls for financially significant systems, including logical access, privileged access, change management, and logging and monitoring; partner with Finance, Internal Audit, and external auditors on design, testing, evidence, and remediation.
Own network security design, including segmentation, firewalls, secure remote and zero-trust access, wireless, and DNS and email security.
Secure enterprise and research storage through access controls, encryption, and data classification; design and regularly test protections for preventing, containing, and recovering from disruptive cyberattacks, including immutable backups, recovery testing, and containment playbooks.
Secure HPC clusters and cloud environments, including identity and privilege design, workload isolation, posture management, and security enforced through infrastructure as code.
Define and enforce secure configuration baselines for Windows, macOS, and Linux endpoints and servers, hypervisors, network devices, and IoT devices; drive configuration compliance monitoring, vulnerability management, and patching with infrastructure and IT teams.
Strengthen enterprise identity and access controls, including SSO, MFA, privileged access management, and periodic access reviews.
Own EDR, SIEM, and MDR capabilities and related vendor relationships; tune detections, lead responses to significant incidents, and run tabletop exercises and post-incident reviews.
Partner with R&D, Product Security, and Operations to secure connected sequencing instruments, IoT devices, and manufacturing and lab networks without disrupting production.
Automate security controls, audit evidence collection, and remediation using Python, Terraform, Ansible, or similar tools to make compliance continuous.
Lead technical responses to customer security questionnaires and reviews; assess the security posture of key vendors and service providers.
Mentor IT and engineering staff on secure practices, direct security vendors’ and contractors’ work, and communicate risk, priorities, and progress to engineers, executives, and auditors.