This is a fully remote position, open to applicants in United States.

📋 Description

• Engineer application security testing at scale, encompassing SAST, DAST, SCA, secret scanning, Infrastructure as Code (IaC) scanning, API and mobile security, along with container/cloud-native application security within CI/CD pipelines.

• Design or contribute to secure-by-design frameworks, established pathways, and release risk gates that are embraced by product teams.

• Develop automation and guardrails, which include pipeline integrations and policy-as-code, to enhance security coverage effectively.

• Assist in maintaining secure coding standards, SBOM/OSS-risk protocols, and VDP/bug-bounty intake processes.

• Operate independently across product and platform teams that manage their respective codebases and architectures.

• Report to the Senior Director of Application, Product, and Manufacturing Security as part of the Danaher Information Security team.

⛳️ Requirements

• Over 9 years of experience in application/product security or security-centric software engineering.

• Practical experience in integrating security into the Software Development Life Cycle (SDLC), including secure design reviews, threat modeling, code reviews, and application security assessments.

• Familiarity with SAST, DAST, SCA, IaC, and secret scanning methodologies.

• Proficient in utilizing application security tools such as Snyk, Veracode, Checkmarx, Semgrep, or GitHub Advanced Security within CI/CD pipelines.

• Experience collaborating independently with product engineering teams to address vulnerabilities and implement secure-by-design practices and guardrails.

• Willingness to travel approximately 15%, including overnight stays, within the territory or to other Danaher locations.