Senior Application Security Engineer (Remote)

Danaher; United States; Remote; USD 150,000 - 200,000; Full time

Benefits offered by this job

Remote work

Health benefits

Job summary

Danaher is seeking a Senior Engineer, Application Security to embed security into the SDLC and influence product/architecture security. You will lead hands-on security reviews, threat modeling, and testing across diverse codebases within a fully remote role.

The role focuses on scalable AppSec, developing secure-by-design patterns, and delivering automation to integrate security into CI/CD. Travel ~15% and collaboration with engineering teams are expected.

Qualifications

• 9+ years of experience in application/product security or security-focused software engineering.
• Hands-on experience embedding security into the SDLC: secure design review, threat modeling, code review, and application security testing (SAST, DAST, SCA, IaC and secret scanning).
• Experience with application security tooling integrated into CI/CD pipelines (Snyk, Veracode, Checkmarx, Semgrep, GitHub Advanced Security).
• Experience working independently with product engineering teams to remediate vulnerabilities and adopt secure-by-design patterns and guardrails.

Responsibilities

• Engineer AppSec testing at scale across CI/CD pipelines.
• Architect secure-by-design patterns, paved roads, and release risk gates for adoption by product teams.
• Build automation and guardrails (pipeline integrations, policy-as-code) to scale coverage.
• Support SBOM/OSS risk processes, and vulnerability intake workflows.

Skills

AppSec testing

SDLC security

CI/CD security tooling

Cloud security

Kubernetes security

Education

Bachelor's degree in Cybersecurity/CS/SE

Tools

Snyk

Veracode

Checkmarx

Semgrep

GitHub Advanced Security

Job description

Danaher is seeking a Senior Engineer, Application Security to embed security into the SDLC and influence product/architecture security. You will lead hands-on security reviews, threat modeling, and testing across diverse codebases within a fully remote role.

The role focuses on scalable AppSec, developing secure-by-design patterns, and delivering automation to integrate security into CI/CD. Travel ~15% and collaboration with engineering teams are expected.