Work Schedule
Standard (Mon-Fri)
Environmental Conditions
Office
Job Description
Job Description
Seeking a proficient and well-versed Senior Product Security Engineer to join our Product Security team. The selected candidate will be responsible for upholding security practices within our organization, ensuring protection throughout the entire software development process.
Key responsibilities
- Work closely with development teams to identify and mitigate security risks in our software and systems.
- Implement and maintain security tools and processes to ensure the security of our software development lifecycle.
- Conduct security assessments and code reviews to identify vulnerabilities and ensure compliance with security standards.
- Develop and maintain secure coding guidelines and provide training to development teams.
- Collaborate with multi-functional teams to ensure the timely and successful delivery of secure software.
- Promote and implement Secure SDLC practices based on compliance requirements.
- Review software security practices and architecture as requested by product teams.
- Mentor and train less experienced team members on technical topics.
- Develop solutions to automate processes and workflows.
- Develop and promote automated scanning tools and practices throughout the organization.
- Identify and drive process improvement initiatives to increase our productivity and/or reduce costs.
- Lead security tool evaluations and Proof of Concepts to make defensible recommendations on tool acquisition, integration and maintenance plans.
- Create performance indicators and reporting from aggregated sources to assist Software Security Management with remediation prioritization within the company.
- Chip in to the team's strategy and long-term roadmap.
Want more jobs like this?
Get Software Engineering jobs in Shanghai, China delivered to your inbox every week.
Education
- Bachelor's or Master's degree in Engineering/Computer Science or equivalent work experience.
Experience
We are looking for candidates with seven plus years of validated experience in software security with a focus on security, including:
- Experience writing and/or testing software applications; experience with automation.
- Experience working with container technologies and cloud providers such as AWS.
- Familiarity with one or more of the following languages: Python, Java, C/C++, .NET, JavaScript, Bash, PowerShell and/or Ruby.
- Familiarity with one or more development tools such as: Eclipse, Visual Studio, Visual Studio Code, IntelliJ, Git, Jira, Jenkins, and/or Docker.
- Strong attention to detail, with interpersonal and time management skills.
- The ability to communicate effectively and professionally with a diverse group of people, including Vice Presidents, Directors, Managers, Developers, and Domain Experts.
Knowledge, Skills, Abilities
In addition to the experience requirements, we are looking for candidates with the following:
- Self-motivated person with an agile demeanor
- A track record of performing application security assessments either via Bug Bounty programs or capture-the-flag events.
- Experience with mobile application security a plus.
- A history of involvement in general information security practice and/or the community.
- Proficient written and verbal communication in the English language.
Our Mission is to enable our customers to make the world healthier, cleaner and safer. Watch as our colleagues explain 5 reasons to work with us. As one team of 120,000+ colleagues, we share a common set of values - Integrity, Intensity, Innovation and Involvement - working together to accelerate research, solve complex scientific challenges, drive technological innovation and support patients in need. #StartYourStory at Thermo Fisher Scientific, where diverse experiences, backgrounds and perspectives are valued.
Apply today! http://jobs.thermofisher.com
Thermo Fisher Scientific is an EEO/Affirmative Action Employer and does not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability or any other legally protected status.