Senior Application Security Engineer — Remote & Impactful

Danaher; New York (NY); On-site; USD 150,000 - 200,000; Full time

Job summary

Danaher is seeking a Senior Engineer, Application Security to embed security into the SDLC and product engineering across multiple teams. The role leads hands-on security reviews, threat modeling, and testing, reporting to the Senior Director of DIS.

The position is fully remote and offers exposure to cloud-native security, SBOM processes, and vulnerability management within a leading life sciences technology company.

Qualifications

• 9+ years of experience in application/product security or security-focused software engineering.
• Hands-on experience embedding security into the SDLC: secure design review, threat modeling, code review, and application security testing (SAST, DAST, SCA, IaC and secret scanning).
• Experience with application security tooling integrated into CI/CD pipelines (Snyk, Veracode, Checkmarx, Semgrep, GitHub Advanced Security).
• Experience working independently with product engineering teams to remediate vulnerabilities and adopt secure-by-design patterns and guardrails.

Responsibilities

• Engineer AppSec testing at scale: SAST/DAST/SCA/secret scanning and cloud-native app security in CI/CD.
• Architect secure-by-design patterns, release risk gates, and guardrails adopted by product teams.
• Build automation and policy-as-code to scale coverage across pipelines.
• Support SBOM/OSS-risk processes and vulnerability intake workflows.

Skills

Security testing

Secure SDLC

Independent collaboration

Education

Bachelor's degree in Cybersecurity or related field

Tools

Snyk

Veracode

Checkmarx

Semgrep

GitHub Advanced Security

Job description

Danaher is seeking a Senior Engineer, Application Security to embed security into the SDLC and product engineering across multiple teams. The role leads hands-on security reviews, threat modeling, and testing, reporting to the Senior Director of DIS.

The position is fully remote and offers exposure to cloud-native security, SBOM processes, and vulnerability management within a leading life sciences technology company.