Senior Engineer, Application Security

Job description

Bring more to life. At Danaher, our work saves lives. And each of us plays a part. Fueled by our culture of continuous improvement, we turn ideas into impact – innovating at the speed of life. Our 60,000+ associates work across the globe at more than 15 unique businesses within life sciences, diagnostics, and biotechnology. Are you ready to accelerate your potential and make a real difference? At Danaher, you can build an incredible career at a leading science and technology company, where we’re committed to hiring and developing from within. You’ll thrive in a culture of belonging where you and your unique viewpoint matter. Learn about the Danaher Business System which makes everything possible. At Danaher, the Senior Engineer, Application Security embeds security into the SDLC and product engineering. Enterprise AppSec strategy and standards are set by leadership/architecture; the Engineer executes within that design — secure design reviews, threat modeling, testing, and developer enablement. The Engineer works independently on complex problems across product teams that each own their own codebases. This position reports to the Senior Manager, Application, Product, and Manufacturing Security and is part of the Danaher Information Security (DIS) located in Pune/Bangalore and will be an onsite role. In this role, you will have the opportunity to: Engineer AppSec testing: SAST/DAST/SCA/secret scanning, IaC scanning, API and mobile security, and container/cloud-native app security in CI/CD. Contribute to secure-by-design patterns and guardrails defined by senior architecture. Build automation and pipeline integrations to scale testing coverage. Support the sustainability model: secure-coding standards and SBOM/OSS-risk workflows. The essential requirements of the job include: Bachelor's degree in Cybersecurity, Computer Science, Software Engineering, or related field. 5+ years of experience in application/product security or security-focused software engineering (GCRF P3 Bachelor's-track minimum; recommended, pending Comp sign-off). Hands-on experience with application security testing: SAST, DAST, SCA, IaC and secret scanning, plus secure design review, code review, or threat modeling. Experience with application security tooling (such as Snyk, Veracode, Checkmarx, Semgrep, or GitHub Advanced Security) integrated into CI/CD pipelines. Experience working independently with product engineering teams to remediate vulnerabilities and apply secure-coding practices. It would be a plus if you also possess previous experience in: Experience with API security, cloud-native/Kubernetes security, or software supply chain/SBOM. GWAPT, GWEB, CSSLP, or a cloud security certification. Exposure to AI/LLM application security. Perform secure design reviews and threat modeling with product teams. Triage and prioritize application vulnerabilities; partner on remediation. Tune and operate SAST/DAST/SCA tooling; reduce false positives. Enable developers with secure-coding patterns and guardrail adoption. Assess OSS/supply-chain risk; support SBOM and release checks. Join our winning team today. Together, we’ll accelerate the real-life impact of tomorrow’s science and technology. We partner with customers across the globe to help them solve their most complex challenges, architecting solutions that bring the power of science to life. For more information, visit www.danaher.com.