Cybersecurity Engineer
The Cybersecurity Engineer is a hands-on technical role responsible for strengthening Clario ’s product and enterprise security posture through proactive security assessments, threat modeling, and secure design practices. This individual will partner closely with engineering, architecture, DevOps, and product teams to identify, assess, and mitigate security risks throughout the Software Development Lifecycle (SDLC).
The ideal candidate possesses deep expertise in penetration testing, threat modeling, application security, and secure development practices, with the ability to translate complex security findings into actionable remediation guidance. This role requires a security professional who can think like an attacker, validate security controls through manual and automated testing, and influence product teams to build resilient, secure solutions by design.
In addition to conducting security assessments, the Cybersecurity Engineer will help mature Clario ’s DevSecOps capabilities by integrating security validation, testing, and governance into development pipelines and engineering workflows. Success in this role requires strong technical skills, effective communication, and the ability to work collaboratively across the organization to drive measurable security improvements.
Clario , part of Thermo Fisher Scientific, is seeking a highly skilled Cybersecurity Engineer to strengthen our Product Security and DevSecOps capabilities through a combination of penetration testing, threat modeling, secure design reviews, and security automation. In this role, you will conduct comprehensive security assessments across web applications, APIs, cloud environments, and supporting infrastructure to identify vulnerabilities and validate security controls. You will partner closely with Product, Engineering, Architecture, and DevOps teams to perform threat modeling exercises, review security architectures, and embed security-by-design principles throughout the Software Development Lifecycle (SDLC). The ideal candidate will have strong expertise in application security, threat modeling frameworks such as STRIDE or PASTA, secure development practices, and DevSecOps methodologies, with hands-on experience integrating security testing into CI/CD pipelines. This role also involves developing security automation, supporting vulnerability management and remediation efforts, mentoring engineering teams, contributing to security standards and governance initiatives, and driving continuous improvement across Clario 's Product Security program. Success in this position requires the ability to think like an attacker, communicate risk effectively to technical and business stakeholders, and leverage modern security practices, cloud security knowledge, and automation technologies to build scalable, resilient, and secure products.
What We Offer
- Competitive compensation
- Provident fund and medical insurance
-
Engaging employee programs and local events
-
Modern office spaces and remote work flexibility
What You’ll Be Doing
-
Conduct comprehensive penetration testing of web applications, APIs, cloud environments, and supporting infrastructure to identify security vulnerabilities and validate security controls.
-
Lead threat modeling exercises for new and existing products, partnering with engineering and architecture teams to identify risks, attack paths, and appropriate mitigations early in the SDLC.
-
Perform secure design and architecture reviews to ensure products are built with security-by-design principles and aligned with industry standards and best practices.
-
Evaluate application, cloud, and infrastructure security controls and provide actionable recommendations to reduce risk and improve overall security posture.
-
Willingness to work in European Shift (1pm to 10pm)
-
Work closely with development teams to prioritize, track, and remediate security findings while promoting secure coding practices.
-
Integrate security tes