Sr. Engineer, Application Security - USA Remote

Danaher is a science and technology company operating across life sciences, diagnostics, and biotechnology. The Senior Engineer, Application Security embeds security into the software development lifecycle and product engineering by executing secure design reviews, threat modeling, security testing, automation, and developer enablement across product and platform teams.

Responsibilities:

• Engineer AppSec testing at scale: SAST/DAST/SCA/secret scanning, IaC scanning, API and mobile security, and container/cloud-native app security in CI/CD
• Architect/contribute secure-by-design patterns, paved roads, and release risk gates that product teams adopt
• Build automation and guardrails (pipeline integrations, policy-as-code) to scale coverage
• Support the sustainability model: secure-coding standards, SBOM/OSS-risk process, and VDP/bug-bounty intake workflows

Requirements:

• 9+ years of experience in application/product security or security-focused software engineering
• Hands-on experience embedding security into the SDLC: secure design review, threat modeling, code review, and application security testing (SAST, DAST, SCA, IaC and secret scanning)
• Experience with application security tooling (such as Snyk, Veracode, Checkmarx, Semgrep, or GitHub Advanced Security) integrated into CI/CD pipelines
• Experience working independently with product engineering teams to remediate vulnerabilities and adopt secure-by-design patterns and guardrails
• Ability to travel around 15%, overnight, within territory or other Danaher locations
• Bachelor's degree in Cybersecurity, Computer Science, Software Engineering, or related field
• Experience with cloud-native/Kubernetes security, API security, or software supply chain/SBOM
• CSSLP, GWAPT, GWEB, OSWE, OSCP, or a cloud security certification
• Exposure to AI/LLM application security