Product Security Engineer

Stack

Responsibilities

• ▹Work with development teams to identify and mitigate security risks in software and systems
• ▹Implement and maintain security tools and processes to protect the software development lifecycle
• ▹Conduct security assessments and code reviews to find vulnerabilities and enforce standards and best practices
• ▹Collaborate with cross-functional teams to deliver secure software on time
• ▹Promote and implement secure SDLC practices based on compliance requirements
• ▹Develop solutions to automate processes and workflows
• ▹Develop and promote automated scanning tools and practices across the organization
• ▹Identify and drive process improvement initiatives to increase productivity or reduce costs
• ▹Build metrics and reporting from aggregated sources to help software security management prioritize remediation
• ▹Contribute to the team's strategy and long-term roadmap
• ▹Mentor and train other engineers on security topics

Requirements

• ▹Bachelor's degree in Engineering or Computer Science, or equivalent work experience
• ▹1+ years of experience in software development
• ▹Experience writing and/or testing software applications; experience with automation
• ▹Basic understanding of container technologies and cloud providers such as AWS
• ▹Familiarity with one or more of: C/C++, Java, .NET, JavaScript, Python, Bash, PowerShell, Ruby
• ▹Familiarity with one or more development tools such as Eclipse, Visual Studio, Visual Studio Code, IntelliJ, Git, Jira, Jenkins, Docker
• ▹Strong attention to detail
• ▹Ability to communicate effectively and professionally with a diverse group of people
• ▹Self-motivated with an agile attitude
• ▹Proficient written and verbal English

Nice to have

• ▹Track record of application security assessments via bug bounty programs or capture the flag events
• ▹History of involvement in general information security practice and/or the community

Soft skills

About the company

Thermo Fisher Scientific is a world leader in serving science, with roughly $40 billion in annual revenue and more than 100,000 colleagues. The Product Security team drives DevSecOps practices across the company through collaborative security engineering.