ARUP Laboratories

ARUP Laboratories operates at the intersection of clinical diagnostics and research infrastructure - a nonprofit enterprise of the University of Utah and its Department of Pathology, headquartered in Salt Lake City's Research Park with a nationwide footprint. The lab runs 65 laboratories and processes over one million patient samples monthly, a scale that translates directly into attack surface. Medical directors, genetic counselors, pathologists, and specialty scientists number more than 150, all handling sensitive data across molecular genetics, genomics, cytogenetics, genomic microarray, and biochemical genetics workflows. The threat model here isn't abstract: genomic data is immutable, high-value, and increasingly targeted. The lab's products - ARUP Consult, a diagnostic decision support tool for clinicians, and Healthcare Advisory Services, which helps laboratories optimize operations - add further digital infrastructure that demands defense. Protecting this environment means grappling with healthcare-specific regulatory frameworks, securing bioinformatics pipelines, and maintaining the integrity of systems where a data compromise could affect diagnostic outcomes for a million-plus patients every month. Security roles here operate within a mission-driven nonprofit context but against a tech stack that rivals large commercial labs. The challenge is securing genomics and pathology platforms without slowing the research and clinical velocity that defines the institution. If you want to work on security problems where the data can't be changed after a breach and the stakes are measured in patient trust, ARUP's operational reality is concrete and non-negotiable.