Qualifications

About the role

The Senior Information Security Engineer is a senior-level technical position responsible for leading complex security engineering initiatives and providing advanced expertise across multiple information security domains. The role operates with significant autonomy, serves as a technical authority, and is accountable for designing, implementing, and optimizing security solutions that address enterprise risk, regulatory requirements, and business objectives. Depending on the area of focus, the engineer may lead Secure Software Development Lifecycle (SSDLC) initiatives to enable security across software development and delivery pipelines or advance security practices for agentic and AI-assisted software development.

Responsibilities

• Serve as a technical subject matter expert, collaborating across Information Security and IT to translate security requirements into practical and scalable solutions.
• Provide adoption guidance for developers.
• Design and maintain representative development environments and CI/CD pipelines to evaluate, validate, and demonstrate application security tools and controls.
• Design and maintain representative agentic development workflows to test and validate security controls.
• Research emerging agentic and AI-assisted development practices and associated security risks and controls.
• Evaluate security technologies and capabilities for risks introduced by agentic and AI-assisted software development.

Requirements

Bachelor’s degree in an applicable field plus five (5) years of relevant experience; pertinent fields include information security, computer science, information systems, engineering, or a related field. A Master’s degree in an applicable field plus four (4) years of relevant experience is preferred. One or more of the following certifications (or equivalent) are required at time of hire: CISSP, CISM, GSEC, OSCP. This vacancy is not eligible for sponsorship; Mayo Clinic will not sponsor or transfer visas and does not participate in the F-1 STEM OPT extension program.

Preferred Qualifications

• Strong software, systems, platform, or security engineering experience supporting modern application development and delivery environments.
• Strong understanding of SSDLC and application security practices, with experience translating security requirements into technical solutions and guidance.
• Experience with CI/CD pipelines, build processes, cloud or container technologies, and application security controls such as SAST, SCA, and software supply chain security.
• Experience with AI-assisted and agentic software development technologies and workflows, including associated application security risks and controls.
• Strong technical leadership, communication, and collaboration skills across security and technology teams.

Benefits

• Medical: Multiple plan options.
• Dental: Delta Dental or reimbursement account for flexible coverage.
• Vision: Affordable plan with national network.
• Pre-Tax Savings: HSA and FSAs for eligible expenses.
• Retirement: Competitive retirement package to secure your future.