As part of our dynamic team of system architects, you will lead the design, implementation, and evolution of the security framework for our software applications and systems.
Your primary goal will be to ensure that our software solutions and related infrastructure are crafted from the ground up with outstanding security practices, effectively safeguarding critical data and systems against potential threats.
As a strategic problem solver with a very strong understanding of cybersecurity, you will play a pivotal role in guiding our organization’s software development projects toward secure and robust architectures!
What will you do?
Security Framework Development : Develop, maintain, and improve a comprehensive security methodology for all software engineering projects, ensuring alignment with industry standards.
Threat Modeling & Risk Assessment : Perform threat modeling and risk assessments for software architectures, identifying potential vulnerabilities and devising strategies to mitigate risks.
Security Guidelines & Standards : Establish and enforce security guidelines, standards, and policies to be followed throughout the software development process.
Collaboration & Guidance : Work closely with development teams to integrate security considerations into the software design and development processes.
Provide expert mentorship on secure coding practices and vulnerability remediation.
Security Tools & Technologies : Evaluate, recommend, and implement security tools and technologies to improve the security posture of software solutions.
Incident Response : Participate in the development and execution of incident response plans, including conducting post-mortem analysis and implementing corrective actions to prevent future occurrences.
Compliance & Certification : Ensure that software solutions align with relevant regulatory and compliance requirements. Assist in the preparation for and management of audits and certifications.
Awareness & Training : Promote security awareness among development teams and collaborators. Conduct regular training sessions on standard methodologies and emerging threats.
Continuous Improvement : Continuously monitor the security landscape for emerging threats and vulnerabilities. Recommend and implement improvements to security policies, procedures, and controls.
How will you get here?
Education
Bachelor’s or Master's degree in Computer Science, Information Security, or a related field. Professional security certifications (, CISSP, CISM, CSSLP) are highly desirable.
Experience
- Demonstrated ability in a software security role with hands-on experience in security architecture design and implementation
- Deep knowledge of security principles, technologies, and frameworks (, OWASP, SANS)
- Hands-on experience with programming languages used in the organization, .NET, Go, JavaScript
- Expert knowledge about architectural principles, practices, and approaches, such as microservices
- Strong cloud knowledge, especially AWS, and secondarily Azure
- Deep understanding of operating systems and deployment technologies, including Kubernetes, Linux, NGINX, Docker, etc.
- Experience with data infrastructure technologies like databases, message brokers, and distributed caches, PostgreSQL, RabbitMQ, Redis
- Familiarity with communication methodologies, including REST, gRPC, Web Sockets, SSE, and Webhooks
- Strong analytical and problem-solving skills, with the ability to perform comprehensive security assessments and make well-informed decisions
- Experience in working in agile environment
Knowledge, Skills, Abilities
- Excellent verbal and written communication skills effectively articulate security needs and strategies to both technical and non-technical collaborators and partners
- Ability to lead and inspire a team. Strong project management and organizational skills
- Ability to work with customers and their IT representatives
This position has not been approved for relocation assistance.
Benefits
We offer competitive remuneration, annual incentive plan bonus, healthcare, and a range of employee benefits. Thermo Fisher Scientific offers employment with an innovative, forward-thinking organization, and outstanding career and development prospects.
We offer an exciting company culture that stands for integrity, intensity, involvement, and innovation!
Our Mission is to enable our customers to make the world healthier, cleaner and safer. Watch as our colleagues explain .
As one team of 100,000+ colleagues, we share a common set of values - Integrity, Intensity, Innovation and Involvement - working together to accelerate research, solve complex scientific challenges, drive technological innovation and support patients in need.
StartYourStory at Thermo Fisher Scientific, where diverse experiences, backgrounds and perspectives are valued.
Senior Systems Administrator II - Generalist - Top Secret clearance - Security Clearance Required
The Senior Systems Administrator II shall contribute to the production and maintenance of documentation for the team's solution system(s), sub-system(s), and component(s) deployed and in use in the activity's IT Solutions portfolio, including as-built documentation, capacity/performance plans, proce...
Systems Administrator, Senior - Security Clearance Required
Air Force? We’re looking for a Systems Administrator with a solid background in Windows systems administration and applying systems management tools to help us operate and maintain a key coalition test and training environment. As a Systems Administrator on our project, you’ll assign personnel to ta...
Sr. Principal Computer Systems Architect -Polygraph required - Security Clearance Required
Maintain security audit and logging information on all classified networks as directed by the Information Systems Security Manager (ISSM). Northrop Grumman Mission Systems is seeking a well-qualified Windows and Virtualization Systems Analyst to join our dynamic Classified Solutions team of technica...
Senior System Engineer - Security Clearance Required
The Senior Systems Engineer will manage system requirements and derived requirements to ensure the delivery of production systems that are compatible with the defined system architectures. They will contribute to the development of customer systems engineering documentation such as System Engineerin...
Senior Principal Systems Engineer - Security Clearance Required
Experience with ICS/SCADA systems * Experience in Model Based Systems Engineering, system architecture development, and system design * Experience working with and directing embedded control software engineers * Experience in IP Networking (L2 and L3 Networks, IP multicast, IPv4 are a must (IPv6 and...
PMA 201 Senior Systems Engineer - Security Clearance Required
As required, participate in PMRs, technical reviews, technical coordination meetings, Test Planning Working Groups (TPWG), CSWG, System Safety Working Group (SSWG), Systems Engineering Technical Reviews (SETRs)/Model Based Systems Engineering Activities, conferences, briefings, and other significant...
Information Systems Security Engineer, Senior Advisor - Security Clearance Required
Our Information Systems Security Engineer will:. Recommend system-level solutions to resolve security requirements. Support the Government in the enforcement of the design and implementation of trusted relationships among external systems and architectures. Bachelor's degree in Computer Science, Inf...
Senior Cyber Security Engineer (Info. Systems & Cyber Security, Sr. Associate)
Senior Cyber Security Engineer (Info. Systems and Cyber Security, Sr. Lead, manage and coordinate cybersecurity through all phases of the system development life cycle, including planning, requirements analysis, design, development, testing and evaluation, and implementation. Senior Engineer for NAW...
Senior FIPS 140 Security Engineer (Federal Information Processing Standards)
Senior FIPS 140 Security Engineer. The Accredited Testing and Evaluation (AT&E, Common Criteria/FIPS) team provides the opportunity to work in the growing IT Security field in support of National defense. The products you will touch will be deployed into larger systems and/or deployments to faci...
Senior Network Architect - Secret Clearance
We are looking for an experienced Network Architect with demonstrated experience in designing and building computer networks such as local area networks (LAN), wide area networks (WAN), intranets, extranets, and other data communication networks. This job posting is for upcoming opportunities with A...