Product Security Engineer

Marion, Kentucky, United StatesWebsite

Full details on LinkedIn

The complete job description, requirements, and application details are available on the original posting.

About Thermo Fisher Scientific

Thermo Fisher Scientific Inc. is a global leader in serving science, formed in 2006 through the merger of Thermo Electron Corporation and Fisher Scientific International Inc. Headquartered in Waltham, Massachusetts, the company employs over 125,000 people and generates annual revenue exceeding $40 billion. Its mission is to enable customers to create a healthier, cleaner, and safer world through innovative technologies, services, and solutions across various sectors. The company operates through four main segments: Life Sciences Solutions, Analytical Instruments, Specialty Diagnostics and Laboratory Products, and Biopharma Services. It offers a wide range of products, including analytical instruments, reagents, lab equipment, and software for research, diagnostics, and manufacturing. Thermo Fisher serves a diverse customer base, including researchers and organizations in life sciences, healthcare, and environmental protection, supporting advancements in areas such as drug discovery, clinical diagnostics, and food safety.

Industry

research

Employees

125,000

9448 engineers

Revenue

$45B

Website

Visit →

Security at Thermo Fisher Scientific

Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.

3 Intel Signals

Security Philosophy

The AppSec philosophy at Thermo Fisher is centered on being a business enabler rather than a blocker, provided security standards are met.
The approach is 'risk-based' and follows a 'defense in depth' strategy.
The program is heavily governed by international standards, specifically maintaining ISO/IEC 27001:2022 certification for cybersecurity management and risk governance.

Security Team

Thermo Fisher Scientific maintains a centralized Cybersecurity Program and a dedicated Product Security Program.
The leadership includes a Vice President, Chief Information Security Officer (CISO) and a Vice President, Chief Product Security Officer.
The 'myLibrary Enterprise Software Development team' is specifically mentioned as performing peer reviews, while a separate 'Penetration Testing team' handles security assessments.
Key Leaders: Erik Winebrenner, VP, Chief Information Security Officer.
Thane E., Vice President, Chief Product Security Officer, Cybersecurity.

Key Initiatives

Active initiatives include: Vulnerability Disclosure - A formal intake process via product.security@thermofisher.com with PGP encryption support.
Secure SDLC - Integration of static analysis at the 'commit' stage and dynamic analysis during execution.
Compliance - Maintaining and updating ISO/IEC 27001:2022 certifications (originally achieved in 2019).
Continuous Delivery - Implementation of GitOps using Argo CD for Kubernetes environments.
Testing - Regular penetration testing against the OWASP Top 10 for core application components.

Preparing for an AppSec interview?

Get the weekly briefing 2,000+ security pros trust.

Interested in this role?

Apply on LinkedIn