Cybersecurity Engineer
Clario , a part of Thermo Fisher Scientific, is seeking a Senior Product Security Engineer to help drive the adoption, operationalization, and continuous improvement of our Product Security Program. This is a developer-first governance role — the ideal candidate is a software engineer who understands security, not a security analyst who dabbles in code. You will build the automation, data pipelines, and dashboards that allow our security program to operate at scale, embed security-by-design throughout the product development lifecycle, and use AI to push the boundaries of what automated security governance can do. If you can pull data from an API, put it in a database, and turn it into an executive-ready dashboard — and you care about security — this role is for you.
What We Offer
- Competitive compensation
- Provident fund and medical insurance
-
Engaging employee programs and local events
-
Modern office spaces and remote work flexibility
What You'll Be Doing
Product Security Governance
-
Establish and maintain governance processes for product security controls, ensuring end-to-end traceability and audit readiness
-
Define, monitor, and report compliance against Product Security policies, standards, and procedures
-
Develop and maintain security control repositories, evidence management processes, and audit artifacts
-
Support internal and external audits, regulatory assessments, and security compliance initiatives
Secure Development Lifecycle (SSDLC)
-
Integrate Product Security Reviews at the earliest stages of product and software development
-
Partner with Engineering and Product teams to embed Security-by-Design principles throughout the SDLC
-
Facilitate security requirements definition, architecture reviews, and design assessments
-
Drive consistent execution of product security checkpoints and governance gates across development programs
Security Automation, Metrics & Dashboards
-
Develop automated dashboards, KPIs, and security metrics using tools such as Power BI to provide actionable insights to engineering teams and leadership
-
Build data pipelines that pull security and product data from tools like GitLab, Jira, and vulnerability management platforms via API, store it in a structured database, and feed executive dashboards
-
Drive automation initiatives that improve visibility into product security posture and governance effectiveness
-
Leverage Python, PowerShell, and API integrations to reduce manual governance activities and enable AI-driven security workflows
Product Data & Artifact Management
-
Automate synchronization of product, application, and security-related data across enterprise systems
-
Establish and maintain repositories for pre-market and post-market security evidence and documentation
-
Ensure product security artifacts are complete, current, accessible, and aligned with regulatory requirements
-
Support vulnerability management, risk assessments, and product security documentation activities
Security Education & Awareness
-
Develop, maintain, and deliver Product Security training programs for engineering, product, and quality teams
-
Promote secure coding practices, threat-informed development, and a security-first culture
-
Measure and report training effectiveness and security program adoption
What We Look For
-
Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field
-
5+ years of experience in Application Security, Product Security, Secure SDLC, DevSecOps, or Cybersecurity Governance
-
Strong software development background — proficiency in Python and/or PowerShell scripting is required
-
Hands-on experience developing and consuming REST APIs to integrate security tools and automate data workflows
-
Experience building dashboards, KPI reports, and security metrics using Power BI, Tableau, Grafana, or similar tools
-
Experience with data pipeline concepts — pulling from APIs, st