Lead and build the company's end-to-end security program for a genomics and AI platform: governance, compliance (HIPAA, HITECH, SOC 2, ISO 27001), AI governance, offensive security, incident response, third-party and SaaS security, and cross-functional security embedding. Manage senior offensive personnel and external partners, present to executives, and deliver SOC 2 readiness and a prioritized HIPAA remediation roadmap quickly.
Sequencing is building the interface between humanity and its DNA.
Using clinical-grade whole genome sequencing, AI, and a rapidly expanding ecosystem of genomic applications, we help people better understand themselves, their health, and their future through their DNA.
The human genome is one of the most valuable and underutilized resources in the world. Our mission is to transform the human genome into a lifelong source of personalized guidance and build the trusted home for every genome on Earth.
As the world’s largest direct-to-consumer whole genome sequencing platform, Sequencing is helping define the future of AI-powered personalized health.
We’re a profitable, venture-backed, fully remote company building category-defining products that help people better understand themselves through their DNA.
Sequencing is hiring a Director of Security to build and lead a modern security program for a rapidly scaling genomics and AI platform. This is the company’s first dedicated security leadership hire and a chance to shape the long term security foundation for a platform that handles highly sensitive consumer genomic and health data. This is a Director level role on the Engineering team, reporting to the Head of Engineering, and leading the security function as it scales, including oversight of senior offensive security personnel and external security partners. Your success helps protect the human genome, build customer trust, and make personalized health insights from whole genome sequencing safer and more accessible for everyone.
- Own the company’s security program end to end, including policies, procedures, playbooks, runbooks, training, governance, and security documentation.
- Build the governance layer that turns ad hoc security work into a repeatable, measurable, and auditable security program.
- Lead ongoing HIPAA and HITECH compliance review, security gap assessment, and remediation initiatives, while driving SOC 2 and ISO 27001 certification efforts from roadmap through audit completion.
- Serve as the primary point of contact for auditors, regulators, customers, and external compliance partners.
- Partner closely with Engineering, DevOps, Bioinformatics, Product, and Operations to embed security into every system that touches customer genomic and health data.
- Establish and enforce AI governance policies covering company wide use of AI tools, including specific platforms such as ChatGPT, Claude, Cursor, and similar tools, or equivalent, along with data classification standards, acceptable use policies, prompt handling practices, and Data Loss Prevention controls.
- Define and enforce security standards for contractors, agencies, consultants, and third party development partners, including intellectual property protection requirements, controlled access policies, device management expectations, and secure handling of customer data.
- Build and maintain centralized visibility into company SaaS tools, shadow IT usage, third party integrations, identity and access management, and organizational data exposure risks.
- Lead offensive security initiatives, including management of senior offensive security personnel, external penetration testing firms, vulnerability assessments, and remediation tracking.
- Effectively manage offensive security workstreams even when the hands on technical work extends beyond the Director’s direct technical specialization.
- Stand up and operationalize the company’s incident response program, including severity classification, escalation paths, communications, executive coordination, forensic readiness, and post incident review procedures.
- Serve as a senior escalation point during security incidents and maintain availability for critical after hours incident response, breach investigation, and executive coordination when necessary.
- Present security posture, organizational risk, compliance status, and security roadmap updates to executive leadership in clear, business oriented language.
- Lead company wide security awareness and training programs covering secure coding, phishing resistance, AI tool usage, handling of sensitive genomic data, and operational security best practices.
- Translate complex security findings into practical actions engineering teams can implement without unnecessarily slowing product velocity.
- Complete an initial HIPAA and HITECH security review and deliver a prioritized remediation roadmap within the first 45 days.
- Reach SOC 2 readiness within 6 months aligned with the company’s infrastructure modernization roadmap.
- Establish a recurring external penetration testing cadence with measurable remediation tracking and executive visibility.
- 10+ years of experience in security engineering, application security, cloud security, security management, or CISO level roles, including 3+ years in a senior leadership or director level position.
- Proven experience building or significantly maturing security programs at rapidly growing consumer technology, ecommerce, SaaS, healthcare, or direct to consumer platforms.
- Demonstrated experience protecting highly sensitive customer data, including protected health information, personally identifiable information, financial data, or genomic data.
- Proven track record leading SOC 2, HIPAA, and ISO 27001 certification efforts from planning through successful audit completion.
- Strong understanding of modern cloud and application security practices across AWS based infrastructure and modern web application environments.
- Experience operating in fast moving startup or scale up environments with evolving systems, incomplete processes, and rapidly changing priorities.
- Strong understanding of modern AI security risks, including AI governance, prompt and data leakage risks, AI assisted software development workflows, and developer AI tooling controls.
- Experience managing SaaS governance, shadow IT risk, vendor security reviews, identity and access lifecycle management, and third party access controls.
- Experience managing offensive security initiatives, external penetration testing vendors, red team exercises, vulnerability management programs, and remediation prioritization.
- Strong cross functional leadership skills with the ability to influence Engineering, DevOps, Bioinformatics, Product, and Operations teams without direct authority.
- Ability to balance strong security standards with startup speed, product velocity, and practical operational realities.
- Experience presenting security posture, organizational risk, incident summaries, and compliance status to founders, executives, boards, auditors, or enterprise customers.
- Hands on familiarity with governance, risk, and compliance platforms such as Vanta, Drata, or equivalent, security information and event management tooling, endpoint and identity management systems, Google Workspace or equivalent productivity suite security administration, SaaS access governance tools, Jira, Confluence, and AWS security services including CloudTrail, GuardDuty, and Security Hub or equivalent cloud security services.
- Experience with modern edge and cloud security platforms such as Cloudflare Enterprise or equivalent, including web application firewall management, distributed denial of service protection, bot mitigation, Zero Trust access controls, API security, and internet facing application protection.
- Experience in healthcare, consumer healthtech, or HIPAA regulated environments strongly preferred.
- Based in the United States and able to work fully remotely.
Similar Jobs
Blockchain • Fintech • Payments • Cryptocurrency
Lead and improve ZODL security posture, manage incident response, coordinate external audits, advise staff on operational and personal security, prioritize mitigations, recruit security talent, and collaborate with engineering and research to secure Zcash software and protocols.
Top Skills:
BlockchainGoKotlinRustSmart ContractsSwiftZcash
Artificial Intelligence • Cloud • Sales • Security • Software • Cybersecurity • Data Privacy
Manage end-to-end customer engagements for SailPoint solutions, including project planning, scoping, budgeting, staffing, risk management, client communication, escalations, documentation, billing, and profitability. Support presales activities such as presentations, RFP responses, proposals, and statements of work. Partner with sales, customer success, and internal teams while identifying expansion opportunities and coaching direct reports.
Top Skills:
SaaSSailpoint
Artificial Intelligence • Cloud • Sales • Security • Software • Cybersecurity • Data Privacy
Lead customer projects as a technical and consultative expert for SailPoint identity governance solutions. Gather business use cases, document requirements and solution designs, educate customers and partners on architecture and best practices, scope implementation projects, deliver partner training, support complex technical solutions through code or configuration, and advise implementation teams. The role requires extensive SailPoint and IAM experience, strong client communication, software implementation skills, and up to 15% travel in New Zealand.
Top Skills:
Active DirectoryAixAngularAWSBeanshellCassandraCSSGoogle Cloud PlatformHpHTMLIdentity And Access Management (Iam)Identity GovernanceJ2EeJavaJavaScriptLdapLinuxAzureMicrosoft Sql ServerMongoDBMySQLNode.jsOraclePeoplesoftReactRedisSailpointSAPServicenowSoapSpmlSunSybaseUnixVueWindowsXML
What you need to know about the Colorado Tech Scene
With a business-friendly climate and research universities like CU Boulder and Colorado State, Colorado has made a name for itself as a startup ecosystem. The state boasts a skilled workforce and high quality of life thanks to its affordable housing, vibrant cultural scene and unparalleled opportunities for outdoor recreation. Colorado is also home to the National Renewable Energy Laboratory, helping cement its status as a hub for renewable energy innovation.
Key Facts About Colorado Tech
- Number of Tech Workers: 260,000; 8.5% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Lockheed Martin, Century Link, Comcast, BAE Systems, Level 3
- Key Industries: Software, artificial intelligence, aerospace, e-commerce, fintech, healthtech
- Funding Landscape: $4.9 billion in VC funding in 2024 (Pitchbook)
- Notable Investors: Access Venture Partners, Ridgeline Ventures, Techstars, Blackhorn Ventures
- Research Centers and Universities: Colorado School of Mines, University of Colorado Boulder, University of Denver, Colorado State University, Mesa Laboratory, Space Science Institute, National Center for Atmospheric Research, National Renewable Energy Laboratory, Gottlieb Institute
