Principal Cybersecurity Engineer

PacBio•Menlo Park, CA

8d•$195,900 - $293,900•Onsite

About The Position

PacBio is seeking a Principal Cybersecurity Engineer to strengthen and mature its security program, protecting sensitive human genomic data, proprietary technology, and customer research. This senior individual contributor owns security architecture and engineering across the company’s network, storage, high-performance computing (HPC), and cloud environments. The role designs and implements controls, hardens systems, and ensures controls can withstand audit scrutiny and security threats. The engineer serves as technical lead for PacBio’s ISO 27001 certification and security-related SOX IT general controls, translating requirements into practical, well-evidenced controls. Reporting to the Head of Information Technology, the role sets cybersecurity’s technical direction and leads across IT, R&D, Software Engineering, Operations, and Finance without direct authority. It combines hands-on engineering and architecture with audit work and executive communication. Non-field-based employees are required onsite Monday through Thursday and may work from home Fridays; some roles may require 100% onsite work. The position may also require visits to other PacBio locations as needed.

Requirements

Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field, or equivalent practical experience.
12 or more years of experience in cybersecurity engineering, security architecture, or infrastructure security, including 5 or more years as a senior technical lead or architect responsible for security across enterprise environments.
Demonstrated experience as technical lead for an ISO 27001 implementation, certification, or surveillance audit.
Experience designing, operating, and evidencing SOX IT general controls in a public company.
Deep hands-on expertise in network security architecture, including segmentation, next-generation firewalls, VPN/ZTNA, and secure remote access.
Experience securing enterprise and research storage, Linux-based HPC environments, and at least one major cloud platform: AWS, Azure, or GCP.
Hands-on experience hardening servers, endpoints, network devices, and IoT devices using CIS Benchmarks or equivalent baselines, supported by configuration management and vulnerability management tools.
Hands-on experience with modern EDR platforms and SIEM, including leading security incidents end to end.
Proficiency in scripting and automation using Python, PowerShell, or Bash, and infrastructure as code using Terraform or Ansible.
Working knowledge of security frameworks such as NIST CSF, NIST SP 800-53, CIS Controls, and SOC 2.
Excellent written and verbal communication skills and demonstrated ability to explain risk and influence engineers, executives, and auditors without direct authority.
Current authorization to work in the United States without the need for present or future sponsorship.

Nice To Haves

Experience with secure software development practices, including secure SDLC, threat modeling, and integrating SAST, SCA, secrets scanning, and container security into CI/CD pipelines.
Experience in life sciences, genomics, biotech, medical devices, or another regulated industry, including protecting genomic or health data under HIPAA, GDPR, or CCPA/CPRA.
Experience securing connected devices, embedded systems, or OT and manufacturing environments.
Experience applying AI and LLM-driven automation to security operations with appropriate human oversight and guardrails.
Certifications such as CISSP, CISM, CCSP, ISO 27001 Lead Implementer or Lead Auditor, GIAC, or a cloud security certification.

Responsibilities

Define and own PacBio’s security architecture, standards, and multi-year engineering roadmap across enterprise, HPC, and cloud environments; prioritize work by risk and track measurable outcomes.
Serve as technical lead for the ISO 27001 program, including defining ISMS scope, conducting risk assessments, implementing and evidencing Annex A controls, maintaining the Statement of Applicability, and preparing for internal, certification, and surveillance audits.
Own security-related IT general controls for financially significant systems, including logical and privileged access, change management, and logging and monitoring; partner with Finance, Internal Audit, and external auditors on control design, testing, evidence, and remediation.
Own network security design, including segmentation, firewalls, secure remote and zero-trust access, wireless, DNS, and email security.
Secure research and enterprise storage using access controls, encryption, and data classification; design and test controls for cyberattack prevention, containment, and recovery, including immutable backups, recovery testing, and containment playbooks.
Secure HPC clusters and cloud environments, including identity and privilege design, workload isolation, posture management, and security enforced through infrastructure as code.
Define and enforce secure configuration baselines for Windows, macOS, and Linux endpoints and servers, hypervisors, network devices, and IoT devices; drive compliance monitoring, vulnerability management, and patching with infrastructure and IT teams.
Strengthen identity and access controls, including SSO, MFA, privileged access management, and periodic access reviews.
Own EDR, SIEM, and MDR capabilities and related vendor relationships; tune detections, lead significant incident response, and run tabletop exercises and post-incident reviews.
Partner with R&D, Product Security, and Operations to secure connected sequencing instruments, IoT devices, and manufacturing and lab networks without disrupting production.
Automate security controls, audit evidence collection, and remediation using Python, Terraform, Ansible, or similar tools.
Lead technical responses to customer security questionnaires and reviews, and assess key vendors’ and service providers’ security posture.
Mentor IT and engineering staff, direct security vendors and contractors, and communicate risk, priorities, and progress to engineers, executives, and auditors.