Job Description

: When you're part of the team at Thermo Fisher Scientific, you'll do important work, like helping customers in finding cures for cancer, protecting the environment or making sure our food is safe. Your work will have real-world impa

: When you're part of the team at Thermo Fisher Scientific, you'll do important work, like helping customers in finding cures for cancer, protecting the environment or making sure our food is safe. Your work will have real-world impact, and you'll be supported in achieving your career goals. How will you make an impact We are a team of Builders, Breakers, and Fixers that specialize in collaborative security engagement. Our goal is the safety of our customers. We do this by providing self-service software security - and to that end, we are passionate about enabling the 3 Ways of DevOps: Fast Flow, Rapid Feedback, and Continuous Learning. What you will do! Lead evaluation projects to select best-in-class security tools, then configure, deploy and promote them to our software engineering community. Build performance indicators and reporting from aggregated sources to assist Software Security Management in building a picture of the current state of risk within the company. Perform application security scans and architectural reviews as requested by product teams. Work with development teams to understand vulnerabilities identified, and recommend general practices and/or training to guide remediation efforts. Work with development teams to validate that remediations have successfully addressed vulnerabilities previously identified. Work alongside Software Security Engineer(s) to perform manual assessment of first and 3rd party applications owned by, or providing services to, Thermo Fisher Scientific as needed. Provide metrics and reporting from aggregated sources to assist Development Security Operations Management in building a picture of the current state of risk within the company. How will you get here Bachelors in Engineering/Computer Science or equivalent experience. Experience 4+ years of experience, including: Familiarity with Application security. Familiarity with DAST and SAST tools. Experience writing and/or testing software automations. Familiarity with one or more of the following languages: C/C++, Java, .NET, JavaScript, Python, Bash, PowerShell and/or Ruby. Familiarity with one or more development tools such as: Eclipse, Visual Studio, Visual Studio Code, IntelliJ, Git, Jira, Jenkins, and/or Docker Strong attention to detail, with proven interpersonal and time management skills. The ability to interact expertly with a diverse group of people, including: Directors Managers Developers Knowledge, Skills, Abilities Proficient written and verbal communication in the English language. A track record of performing application security assessments either via Bug Bounty programs or capture the flag events experience with mobile application security a plus. Solid Understanding and experience on CI/CD pipelines and integrations. Our Mission is to enable our customers to make the world healthier, cleaner and safer. Watch as our colleagues explain . As one team of 100,000+ colleagues, we share a common set of values - Integrity, Intensity, Innovation and Involvement - working together to accelerate research, solve complex scientific challenges, drive technological innovation and support patients in need. #StartYourStory at Thermo Fisher Scientific, where diverse experiences, backgrounds and perspectives are valued. Apply today! http://jobs.thermofisher.com Thermo Fisher Scientific is an EEO/Affirmative Action Employer and does not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability or any other legally protected status.