At Invitae, we believe that good health is possible—and that genetic information has the ability to transform the way medicine is practiced, making what once seemed impossible possible, as we empower people to make decisions about their health through the power of genetics.

At Invitae, security is an important component. On Invitae’s application security team you will help secure data pertaining to patient genomes. 

Invitae is currently seeking a Information Security Engineer to work closely with business partners to further the information security vision, and strategy. Tasks will be a mix of security automation tasks, penetration testing, code review and driving vulnerability remediation. 

What you will do:

• Perform clear box penetration tests 
• Create and Deliver penetration test findings to development teams
• Clearly communicate risks to business partners
• Drive discovered vulnerabilities to remediation through clear communication 
• Assist the application security team automate security related tasks

What you bring:

• Typically requires a minimum of 8 years of related experience with a Bachelor’s degree; or 6 years and a Master’s degree; or a PhD with 3 years experience. Any equivalent combination of training, education, and experience that provides the required skills, knowledge and abilities.
• A strong understanding of common web application vulnerabilities
• Three or more years of experience performing penetration tests
• A team oriented mindset 
• The ability to work with teams across the organization in a diplomatic matter. 
• The ability to perform secure code review in modern programming languages such as Java, Python and C#
• Ability to proficiently code in at least one high level programming language
• Excellent written and oral communications skills, as well as strong interpersonal and relationship building skills.
• High level of personal integrity, with the ability to professionally handle confidential matters while leveraging the appropriate level of judgment

Preferred skills:

• A working understanding of AWS, terraform, SSDLC, and GitHub Actions 
• Experience threat modeling and performing secure architecture review

Please apply even if you don’t meet all of the “What you bring” requirements noted.  It’s rare that someone checks every single item, it’s ok, we encourage you to apply anyways.  

Join us!

At Invitae, we value diversity and provide equal employment opportunities (EEO) to all employees and applicants without regard to race, color, religion, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. We will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of the San Francisco Fair Chance Ordinance.

We truly believe a diverse workplace is crucial to our company's success and to better serve our diverse patients. Your input is especially valuable. We’d greatly appreciate it if you can take a quick moment to make your selection(s) below. Submissions will be anonymous.

#LI-Remote