Strategic advisor and operational leader guiding product security integration across Thermo Fisher’s global portfolio.
Responsibilities
Partner with product teams and business leaders to align product security activities with roadmaps
Develop and deliver product security strategy and guidance for products, platforms, and portfolios
Coordinate and prioritize security engagements such as architecture reviews, threat modeling, penetration testing
Translate cybersecurity requirements, regulations, and risks into actionable guidance
Drive operational excellence through process improvement, governance, metrics, and cross‑functional collaboration
Requirements
Bachelor’s Degree in Information Assurance, Information Security, Management Information Systems, Computer Science, Engineering, or related technical field
The Security Engineer, Secure Development is responsible for establishing, leading, and enforcing security standards for all internally developed software, automation, and AI enabled solutions prior to customer delivery or internal production use.
Responsibilities
Establish and enforce secure development standards for internal applications, platforms, automation, and tooling
Perform and oversee manual and automated code reviews (static, dynamic, dependency, and supply chain analysis)
Lead a specialized engineering division focused on AI, application security, secure software development, and emerging technologies within the New York City Police Department.
Responsibilities
Direct the division’s engineering strategy, technical priorities, and operations, advancing secure, scalable, and cost-effective technology solutions.
Oversee the secure architecture and integration of enterprise AI platforms, including AI gateways, model access controls, orchestration, data protection, and safeguards against emerging AI threats.
Establish and enforce engineering standards, architectural safeguards, and security controls across emerging technologies and development environments.
Lead application security and DevSecOps practices, including vulnerability management, secrets detection, automated security testing, and software supply-chain protection.
Direct engineering standards and security controls for the enterprise development hub, including CI/CD practices and AI-assisted development tools such as GitHub Copilot.
Requirements
Baccalaureate degree from an accredited college or university
The role helps strengthen the organization’s application security posture by executing security testing, assessing vulnerabilities, and partnering with application and engineering teams to drive effective remediation.
Compensation
Competitive compensation, including base pay and annual incentive
Review application security findings, validate risk and severity, and support prioritization, remediation, retesting, and closure.
Partner with application development and engineering teams to explain security findings, recommend practical remediation approaches, and track vulnerabilities through resolution.
Support Application Security platforms and services through security test execution, issue analysis, operational monitoring, troubleshooting, and adherence to established processes.
Apply established security standards, controls, and governance requirements across secure development and application security testing activities.
Design, develop, enhance, and support modular Python services and REST APIs for the EDGE V4 Calculation Engine.
Responsibilities
Design, develop, enhance, and support modular Python services and REST APIs for the EDGE V4 Calculation Engine.
Translate validated building science formulas, rules, assumptions, and dependency flows into accurate, maintainable, and testable Python components.
Develop and integrate calculation capabilities for energy, water, materials, embodied carbon, baseline standards, scenario simulation, explainability, anomaly management, and cost-related functions as prioritized by the product backlog.
Build reusable calculation libraries, data models, validation rules, configuration services, and version-controlled datasets using Python, FastAPI, Pydantic, SQL, and PostgreSQL or approved equivalent technologies.
Integrate calculation services with the EDGE V4 application through well-defined API contracts, structured inputs and outputs, secure authentication, and reliable error handling.
A strategic leadership role to establish software engineering practices, standards, and structure to modernize enterprise platforms and deliver secure, scalable, maintainable solutions across the organization.
Responsibilities
Own and evolve our software engineering practice, establishing clear standards, processes and expectations that improve consistency, quality and accountability.
Connect development efforts across the organization, working cross-functionally with dispersed teams, technology partners and business stakeholders to create alignment around how software is designed, developed and delivered.
Bring structure without unnecessary bureaucracy, introducing practical engineering disciplines that improve security, scalability, maintainability and delivery.
Lead engineering activities supporting the modernization of enterprise platforms, including PVC Connect, with a focus on microservices, API-first development, integrations and scalable architecture.
Establish and continuously improve engineering practices for CI/CD, code quality, observability, release management and secure software development.