Work Schedule
Standard (Mon-Fri)

Environmental Conditions
Office

Job Description

Thermo Fisher Scientific Inc. is seeking a highly skilled and experienced Staff Engineer, Software to join our world-class Engineering team. As a global leader in serving science, Thermo Fisher Scientific Inc. is dedicated to enabling our customers to make the world healthier, cleaner, and safer. With our innovative technologies and industry-leading brands.

Responsibilities:

• Collaborate with diverse teams to design, implement, and maintain secure infrastructure solutions for web applications.
• Develop and implement automation tools and scripts to streamline deployment, monitoring, and management processes while adhering to security standards.
• Design and implement robust security measures, including access controls, encryption, firewalls, intrusion detection/prevention systems, and vulnerability management.
• Conduct regular security assessments and audits to identify vulnerabilities, assess risks, and implement appropriate remediation measures.
• Monitor system performance and security logs to proactively identify and address security threats and anomalies.
• Stay updated on the latest security trends, vulnerabilities, and effective strategies, and provide recommendations for continuous improvement.
• Collaborate with development teams to incorporate effective security measures into the CI/CD pipeline and promote adherence to secure coding practices.
• Offer guidance and mentorship to junior team members, promoting a culture of security awareness and constructive collaboration.

• Bachelor's degree in Computer Science, Information Technology, or a related field (or equivalent work experience).
• 6+ years of experience in a DevOps/TechOps role, with a strong focus on web security.
• In-depth knowledge of cloud platforms such as AWS, Azure, or GCP, including experience with infrastructure as code (e.g., Terraform, CloudFormation).
• Proficiency in scripting and programming languages such as Python, Bash, or PowerShell.
• Hands-on experience with web application security tools and technologies, including WAFs, DDoS protection, and threat intelligence platforms.
• Experience with containerization and orchestration technologies such as Docker or Kubernetes.
• Strong understanding of networking principles and protocols, including TCP/IP, DNS, HTTP/S, and SSL/TLS.
• Excellent problem-solving skills and the ability to work effectively in a fast-paced, collaborative environment.
• Relevant certifications such as Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), or AWS Certified Security - Specialty (preferred but not required).