The Senior Information Security Engineer is a senior-level technical position responsible for leading complex security engineering initiatives and providing advanced expertise across multiple information security domains. The position operates with significant autonomy, serves as a technical authority, and is accountable for designing, implementing, and optimizing security solutions that address enterprise risk, regulatory requirements, and business objectives.
Depending on the area of focus, the Senior Information Security Engineer may lead Secure Software Development Lifecycle (SSDLC) initiatives focused on enabling security across software development and delivery pipelines or advancing security practices for agentic and AI-assisted software development. Examples of such activities include the following:
- Serves as a technical subject matter expert, collaborating across Information Security and IT to translate security requirements into practical and scalable solutions. Provide adoption guidance for developers.
- Design and maintain representative development environments and CI/CD pipelines to evaluate, validate, and demonstrate application security tools and controls.
- Design and maintain representative agentic development workflows to test and validate security controls.
- Research emerging agentic and AI-assisted development practices and associated security risks and controls.
- Evaluate security technologies and capabilities for risks introduced by agentic and AI-assisted software development.
Bachelor’s degree in applicable field plus five (5) years of relevant experience. Pertinent fields of study and experience include, but are not limited to, information security, computer science, information systems, engineering, or a related field.
Master’s degree in applicable field plus four (4) years of relevant experience preferred. Pertinent fields of study and experience include, but are not limited to, information security, computer science, information systems, engineering, or a related field.
One or more of the following certifications (or equivalent) are required at time of hire: CISSP, CISM, GSEC, OSCP.
Preferred Qualifications
- Strong software, systems, platform, or security engineering experience supporting modern application development and delivery environments.
- Strong understanding of SSDLC and application security practices, with experience translating security requirements into technical solutions and guidance.
- Experience with CI/CD pipelines, build processes, cloud or container technologies, and application security controls such as SAST, SCA, and software supply chain security.
- Experience with AI-assisted and agentic software development technologies and workflows, including associated application security risks and controls.
- Strong technical leadership, communication, and collaboration skills across security and technology teams.
This vacancy is not eligible for sponsorship/ we will not sponsor or transfer visas for this position. Also, Mayo Clinic DOES NOT participate in the F-1 STEM OPT extension program.
About UsMayo Clinic is top-ranked in more specialties than any other care provider according to U.S. News & World Report. As we work together to put the needs of the patient first, we are also dedicated to our employees, investing in competitive compensation and comprehensive benefit plans – to take care of you and your family, now and in the future. And with continuing education and advancement opportunities at every turn, you can build a long, successful career with Mayo Clinic.
- Medical: Multiple plan options.
- Dental: Delta Dental or reimbursement account for flexible coverage.
- Vision: Affordable plan with national network.
- Pre-Tax Savings: HSA and FSAs for eligible expenses.
- Retirement: Competitive retirement package to secure your future.
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender identity, sexual orientation, national origin, protected veteran status or disability status. Learn more about the "EOE is the Law". Mayo Clinic participates in E-Verify and may provide the Social Security Administration and, if necessary, the Department of Homeland Security with information from each new employee's Form I-9 to confirm work authorization.
Skills Required
- Bachelor's degree in an applicable field such as information security, computer science, information systems, engineering, or a related field
- Five years of relevant experience
- One or more certifications: CISSP, CISM, GSEC, OSCP, or equivalent
- Master's degree in an applicable field
- Four years of relevant experience with a master's degree
- Strong software, systems, platform, or security engineering experience supporting modern application development and delivery environments
- Strong understanding of SSDLC and application security practices
- Experience translating security requirements into technical solutions and developer guidance
- Experience with CI/CD pipelines, build processes, cloud or container technologies, and application security controls such as SAST and SCA
- Experience with AI-assisted and agentic software development technologies and workflows
- Strong technical leadership, communication, and collaboration skills
Mayo Clinic Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Mayo Clinic and has not been reviewed or approved by Mayo Clinic.
-
Retirement Support — A no-cost pension plus an employer-matched 403(b)/401(k) is positioned as a standout differentiator, offering strong long-term financial security. Feedback suggests this retirement combination elevates overall total rewards even when base pay is moderate.
-
Healthcare Strength — Expanded medical networks, enhanced fertility coverage, and employer absorption of a plan year’s premium increases point to robust healthcare offerings. Feedback suggests annual updates maintain breadth and competitiveness of coverage.
-
Parental & Family Support — Adoption assistance, dependent scholarships, child and elder-care resources, and EAP services provide meaningful family-oriented support. Feedback suggests these programs add tangible value beyond salary alone.
Mayo Clinic Insights
What We Do
Mayo Clinic is the first and largest integrated, not-for-profit medical group practice in the world. Doctors from every medical specialty work together to care for patients, joined by common systems and a philosophy of "the needs of the patient come first." More than 3,800 physicians and scientists and 50,900 allied health staff work at Mayo Clinic, which has sites in Rochester, Minn., Jacksonville, Fla., and Scottsdale/Phoenix, Ariz. Mayo Clinic also serves over 70 communities through Mayo Clinic Health System with locations in MN, IA, and WI. Collectively, these locations care for more than 1 million people each year.
