Senior Engineer, Application Security

Job Summary

At Danaher, the Senior Engineer, Application Security embeds security into the SDLC and product engineering. Enterprise AppSec strategy and standards are set by leadership/architecture; the engineer executes within that design - secure design reviews, threat modeling, testing, and developer enablement. The engineer works independently on complex problems across product teams that each own their codebases.

Location: Pune/Bangalore onsite.

Responsibilities

• Engineer AppSec testing: SAST/DAST/SCA/secret scanning, IaC scanning, API and mobile security, and container/cloud-native app security in CI/CD.
• Contribute to secure-by-design patterns and guardrails defined by senior architecture.
• Build automation and pipeline integrations to scale testing coverage.
• Support the sustainability model: secure-coding standards and SBOM/OSS-risk workflows.
• Perform secure design reviews and threat modeling with product teams.
• Triage and prioritize application vulnerabilities; partner on remediation.
• Tune and operate SAST/DAST/SCA tooling; reduce false positives.
• Enable developers with secure-coding patterns and guardrail adoption.
• Assess OSS/supply-chain risk; support SBOM and release checks.

Essential requirements

• Bachelors degree in Cybersecurity, Computer Science, Software Engineering, or related field.
• 5+ years of experience in application/product security or security-focused software engineering (GCRF P3 Bachelors-track minimum; recommended, pending Comp sign-off).
• Hands-on experience with application security testing: SAST, DAST, SCA, IaC scanning, secret scanning, plus secure design review, code review, or threat modeling.
• Experience with application security tooling (such as Snyk, Veracode, Checkmarx, Semgrep, or GitHub Advanced Security) integrated into CI/CD pipelines.
• Experience working independently with product engineering teams to remediate vulnerabilities and apply secure-coding practices.

Preferred qualifications

• Experience with API security, cloud-native/Kubernetes security, or software supply chain/SBOM.
• GWAPT, GWEB, CSSLP, or a cloud security certification.
• Exposure to AI/LLM application security.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.