{"id":3202729,"url":"https://alion.io/job/pacbio-principal-cybersecurity-engineer","title":"Principal Cybersecurity Engineer","company":{"id":58729,"name":"PacBio","domain":"pacb.com","url":"https://alion.io/company/pacbio","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Menlo Park, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":195900,"max":293900,"currency":"USD","period":"year","gross":null,"usd_annual":293900},"salary_estimate":null,"experience_years_min":12,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Ansible","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Bash","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"Configuration Management","optional":false},{"name":"Crowdstrike","optional":false},{"name":"DNS","optional":false},{"name":"GCP","optional":false},{"name":"HPC","optional":false},{"name":"ISO 27001","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"NIST CSF","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SentinelOne","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"VPN","optional":false},{"name":"Windows","optional":false},{"name":"Zero Trust","optional":false},{"name":"CI/CD","optional":true},{"name":"GDPR","optional":true},{"name":"HIPAA","optional":true},{"name":"LLM","optional":true},{"name":"Threat Modeling","optional":true}],"status":"live","first_seen_at":"2026-10-22T00:00:00Z","employer_posted_date":"2026-10-22","last_verified_at":"2026-10-30T02:36:24Z","board_verified":true,"closed_at":null,"days_open":8,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":8},"description":"Principal Cybersecurity Engineer\nPacBio | Menlo Park, CA | Onsite\nOPPORTUNITY\nPacBio's long-read sequencing platforms help scientists and clinicians resolve genetically complex problems in human health, agriculture, and basic research. The information we protect, including human genomic data, proprietary chemistry and instrument designs, and the research of the customers who trust our platforms, is among the most sensitive that exists.\nWe are seeking a Principal Cybersecurity Engineer to strengthen and mature PacBio's security program.\nABOUT THE ROLE\nAs Principal Cybersecurity Engineer, you will own security architecture and engineering end to end across PacBio's network, storage, high-performance computing (HPC), and cloud environments. You will design and implement controls, harden the systems we run, and ensure those controls stand up to auditors, customers, and attackers alike.\nYou will serve as the technical lead for PacBio's ISO 27001 certification and for security-related SOX IT general controls, translating requirements into practical, well-evidenced controls that fit how our scientists, engineers, and operations teams work.\nThis senior individual contributor role reports to the Head of Information Technology and sets the technical direction for cybersecurity at PacBio. This role requires comfort moving between hands-on engineering, architecture, audit, and executive communication, and the ability to lead across IT, R&D, Software Engineering, Operations, and Finance without direct authority.\nRESPONSIBILITIES\nSecurity architecture and roadmap: Define and own PacBio's security architecture, standards, and multi-year engineering roadmap across enterprise, HPC, and cloud environments. Prioritize work based on risk and track progress with clear, measurable outcomes.\nISO 27001 certification: Serve as technical lead for PacBio's ISO 27001 program. Help define ISMS scope, conduct risk assessments, implement and evidence Annex A controls, maintain the Statement of Applicability, and lead preparation for internal, certification, and surveillance audits.\nSOX IT general controls: Own security-related ITGCs for financially significant systems, including logical access, privileged access, change management, and logging and monitoring. Partner with Finance, Internal Audit, and external auditors on control design, testing, evidence, and timely remediation of deficiencies.\nNetwork security: Own the security design of PacBio's networks, including segmentation, firewalls, secure remote and zero-trust access, wireless, and DNS and email security.\nStorage, data protection, and resilience: Secure large-scale research and enterprise storage through access controls, encryption, and data classification. Design and regularly test controls that allow PacBio to prevent, contain, and recover from disruptive cyberattacks, including immutable backups, recovery testing, and containment playbooks.\nHPC and cloud security: Secure the HPC clusters and cloud environments (AWS, Azure, and/or GCP) that support sequencing data analysis and R&D, including identity and privilege design, workload isolation, posture management, and security enforced through infrastructure as code.\nDevice and server hardening: Define and enforce secure configuration baselines (e.g., CIS Benchmarks) for Windows, macOS, and Linux endpoints and servers, hypervisors, network devices, and IoT devices. Drive configuration compliance monitoring, vulnerability management, and patching with infrastructure and IT teams.\nIdentity and access: Strengthen identity and access controls across the enterprise, including SSO, MFA, privileged access management, and periodic access reviews.\nThreat detection and response: Own EDR, SIEM, and MDR capabilities and the vendor relationships behind them. Tune detections for fidelity and coverage, lead response to significant security incidents, and run tabletop exercises and post-incident reviews.\nConnected instruments and manufacturing: Partner with R&D, Product Security, and Operations to secure connected sequencing instruments, IoT devices, and manufacturing and lab networks without disrupting production.\nAutomation: Automate security controls, audit evidence collection, and remediation using Python, Terraform, Ansible, or similar tools to make compliance continuous rather than periodic.\nCustomer and vendor assurance: Lead technical responses to customer security questionnaires and reviews, and assess the security posture of key vendors and service providers.\nTechnical leadership and communication: Mentor IT and engineering staff on secure practices, direct the work of security vendors and contractors, and clearly communicate risk, priorities, and progress to engineers, executives, and auditors.\nQUALIFICATIONS\nBachelor's degree in Computer Science, Information Security, Engineering, or a related field, or equivalent practical experience.\n12 or more years of experience in cybersecurity engineering, security architecture, or infrastructure security, including 5 or more years as a senior technical lead or architect responsible for security across enterprise environments.\nDemonstrated experience as a technical lead for an ISO 27001 implementation, certification, or surveillance audit.\nExperience designing, operating, and evidencing SOX IT general controls in a public company.\nDeep, hands-on expertise in network security architecture, including segmentation, next-generation firewalls, VPN/ZTNA, and secure remote access.\nProven experience securing enterprise and research storage, Linux-based HPC environments, and at least one major cloud platform (AWS, Azure, or GCP).\nHands-on experience hardening servers, endpoints, network devices, and IoT devices using CIS Benchmarks or equivalent baselines, supported by configuration management and vulnerability management tools.\nHands-on experience with modern EDR platforms (e.g., CrowdStrike, SentinelOne, Microsoft Defender) and SIEM, including leading security incidents end to end.\nProficiency in scripting and automation (Python, PowerShell, or Bash) and infrastructure as code (Terraform, Ansible).\nWorking knowledge of security frameworks such as NIST CSF, NIST SP 800-53, CIS Controls, and SOC 2.\nExcellent written and verbal communication skills, with a demonstrated ability to explain risk clearly and influence engineers, executives, and auditors without direct authority.\nPREFERRED QUALIFICATIONS\nExperience with secure software development practices, including secure SDLC, threat modeling, and integrating SAST, SCA, secrets scanning, and container security into CI/CD pipelines.\nExperience in life sciences, genomics, biotech, medical devices, or another regulated industry, including protecting genomic or health data under HIPAA, GDPR, or CCPA/CPRA.\nExperience securing connected devices, embedded systems, or OT and manufacturing environments.\nExperience applying AI and LLM-driven automation to security operations, with appropriate human oversight and guardrails.\nCertifications such as CISSP, CISM, CCSP, ISO 27001 Lead Implementer or Lead Auditor, GIAC, or a cloud security certification.\nCandidates must have current authorization to work in the United States without the need for present or future sponsorship.\nNon-Field Based Employees are required to be onsite Monday-Thursday (Friday work from home). Depending on the role, some employees may be required to be 100% onsite.\nYou may be required from time to time to visit and work at PacBio locations and for such times as the Company considers necessary for the proper performance of your duties.\nAll listed tasks and responsibilities are deemed as essential functions to this position; however, business conditions may require reasonable accommodations for additional tasks and responsibilities.\nAll qualified applicants will receive consideration for employment without regard to race, sex, color, religion, national origin, protected veteran status, or on the basis of disability, gender identity, and sexual orientation.\nSalary Range:\n$195,900.00 - $293,900.00To all Staffing and Recruiting Agencies: Our Careers Site is only for individuals seeking a job at PacBio. Staffing and recruiting agencies and individuals being represented by an agency are not authorized to use this site or to submit profiles, applications or resumes, and any such submissions will be considered unsolicited. PacBio does not accept unsolicited resumes or applications from agencies. Please do not forward resumes to our jobs alias, PacBio employees or any other company location. PacBio is not responsible for any fees related to unsolicited resumes/applications.\nAll qualified applicants will receive consideration for employment without regard to race, sex, color, religion, national origin, protected veteran status, or on the basis of disability, gender identity, and sexual orientation.\nIf you are an individual with a disability and require a reasonable accommodation to complete any part of the application process, or are limited in the ability or unable to access or use this online application process and need an alternative method for applying, you may contact us at 650-521-8000, or  for assistance.\nVisit our following pages for more information on:\nFAQs\nBenefits\nCulture\nEqual Opportunity Employment\nBeware of Recruitment Fraud\nPlease be aware of employment scams where people or entities misuse PacBio’s name, or the names of PacBio employees, to post fake job advertisements or make fake job offers.\nPacBio will never extend a job offer without a personal interview and will never charge any money for joining our company. All current job openings are displayed on the Careers page of our official website.\nIf you see a job posting that is not on the PacBio official website, or have been approached with a job offer that you suspect may be fraudulent, we strongly recommend you do not respond and do not send money or provide any personal information.\nIT IS LIKELY A SCAM OR FAKE JOB AD IF:\nThe job offer requires youto pay something (for example, to purchase equipment).\nYou receive a job offer that you didn’t apply for, or without a personal interview or interaction.\nThe interview seems to involve AI video or audio.\nYou found a job on a job board or third-party channel, but the job doesn’t exist on the official PacBio careers page\nYou suspect it is a scam.\nHOW TO PROTECT YOURSELF:\nNever give personal and confidential information.\nNever pay for anything as part of interviewing for, or accepting, an offer of employment.\nIgnore it if it seems like a scam.","description_format":"text","description_chars":10587,"description_truncated":false,"requirements":{"experience_years_min":12,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Biotechnology","Health Care"],"lifecycle":[{"event":"open","at":"2026-10-24T09:48:50Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":8,"expected_fill_days":42,"reasons":["conf:3","win:early"],"computed_at":"2026-10-30T05:48:23Z"},"pay":{"stated_usd_annual":293900,"is_top_pay":true},"html_url":"https://alion.io/job/pacbio-principal-cybersecurity-engineer","json_url":"https://alion.io/job/pacbio-principal-cybersecurity-engineer.json","meta":{"generated_at":"2026-10-30T09:13:03Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13216,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58729},"rest":"https://alion.io/mcp/rest/get_company?id=58729"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fpacbio-principal-cybersecurity-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fpacbio-principal-cybersecurity-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fpacbio-principal-cybersecurity-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/pacbio-principal-cybersecurity-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fpacbio-principal-cybersecurity-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3202729}},{"tool":"search_jobs","arguments":{"company":"pacb.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3202729},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}