Job Description

About Thermo Fisher Scientific

Thermo Fisher Scientific Inc. (NYSE: TMO) is the world leader in serving science, with annual revenue of approximately $40 billion. Our Mission is to enable our customers to make the world healthier, cleaner and safer. Whether our customers are accelerating life sciences research, solving sophisticated analytical challenges, improving patient diagnostics and therapies or growing efficiency in their laboratories, we are here to support them. Our distributed team of more than 100,000 colleagues delivers an outstanding combination of innovative technologies, purchasing convenience and pharmaceutical services through our industry-leading brands, including Thermo Scientific, Applied Biosystems, Invitrogen, Fisher Scientific, Unity Lab Services, Patheon and PPD.

What we do

The Product Security team is a group of Builders, Breakers, and Fixers that specialize in collaborative security engagement. The goal of the Software Security (DevSecOps) team is to provide self-service security and to that end, the team is focused on enabling the 3 Ways of DevOps: Fast Flow, Rapid Feedback, and Continuous Learning. As the business moves through its digital transformation, the DevSecOps team is a vanguard for promoting and enabling DevOps practices across the organization. We aim to integrate and enhance current processes, remove bottlenecks, and enable safe experimentation whenever possible.

How will you make an impact?

Software Security Engineer engages with product development teams across the organization and acts as a subject matter expert for providing mentorship related to secure software development practices.

Key responsibilities

• Promote and implement Secure software development lifecycle (SDLC) practices based on compliance requirements.

• Review software security practices and architecture as requested by product teams.

• Implement and maintain security tools and processes to ensure the security of our software development lifecycle.

• Develop solutions to automate processes and workflows.

• Develop and promote automated scanning tools and practices throughout the organization.

• Identify and drive process improvement initiatives to increase our productivity and/or reduce costs.

• Develop metrics and reporting from aggregated sources to assist Software Security Management with remediation prioritization within the company.

• Contribute to the team’s strategy and long-term roadmap.

How will you get here?

Education

• Bachelor's or Master’s degree in Engineering/Computer Science or equivalent work experience.

Experience

We are looking for candidates with 3+ years of experience in software development with a focus on security, including:

• Experience writing and/or testing software applications; experience with automation.

• Basic understanding of container technologies and cloud providers such as AWS.

• Familiarity with one or more of the following languages: C/C++, Java, .NET, JavaScript, Python, Bash, PowerShell and/or Ruby.

• Familiarity with one or more development tools such as: Eclipse, Visual Studio, Visual Studio Code, IntelliJ, Git, Jira, Jenkins, and/or Docker.

• Strong attention to detail.

• The ability to communicate effectively and professionally with a diverse group of people.

Knowledge, Skills, Abilities

In addition to the experience requirements, we are looking for candidates with the following:

• Self-motivated person with an agile attitude

• A track record of performing application security assessments either via Bug Bounty programs or capture the flag events.

• Experience with mobile application security a plus.

• A history of involvement in general information security practice and/or the community.

• Proficient written and verbal communication in the English language.

Thermo Fisher Scientific is an EEO/Affirmative Action Employer and does not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability or any other legally protected status.

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

Thermo Fisher Scientific is an EEO/Affirmative Action Employer and does not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability or any other legally protected status.