Sr. Engineer, Application Security - USA Remote

• 9+ years of experience in application/product security or security-focused software engineering.
• Hands-on experience embedding security into the SDLC: secure design review, threat modeling, code review, and application security testing (SAST, DAST, SCA, IaC and secret scanning).
• Experience with application security tooling (such as Snyk, Veracode, Checkmarx, Semgrep, or GitHub Advanced Security) integrated into CI/CD pipelines.
• Experience working independently with product engineering teams to remediate vulnerabilities and adopt secure-by-design patterns and guardrails.

Travel, Motor Vehicle Record & Physical/Environment Requirements:

• Ability to travel around 15%, overnight, within territory or other Danaher locations.

It would be a plus if you also possess previous experience in:

• Bachelor’s degree in Cybersecurity, Computer Science, Software Engineering, or related field.
• Experience with cloud-native/Kubernetes security, API security, or software supply chain/SBOM.
• CSSLP, GWAPT, GWEB, OSWE, OSCP, or a cloud security certification.
• Exposure to AI/LLM application security.

The annual salary range for this role is $150,000 - $200,000. This is the range that we in good faith believe is the range of possible compensation for this role at the time of this posting. This range may be modified in the future.

We offer comprehensive package of benefits including paid time off, medical/dental/vision insurance and 401(k) to eligible employees. #LI-Remote

Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, commission, benefits, or any other form of compensation and benefits that are allocable to a particular employee remains in the Company’s sole discretion unless and until paid and may be modified at the Company’s sole discretion, consistent with the law.

Join our winning team today. Together, we’ll accelerate the real-life impact of tomorrow’s science and technology. We partner with customers across the globe to help them solve their most complex challenges, architecting solutions that bring the power of science to life.

At Danaher, our work saves lives. And each of us plays a part. Fueled by our culture of continuous improvement, we turn ideas into impact - innovating at the speed of life.

Our 60,000+ associates work across the globe at more than 15 unique businesses within life sciences, diagnostics, and biotechnology.

Are you ready to accelerate your potential and make a real difference? At Danaher, you can build an incredible career at a leading science and technology company, where we’re committed to hiring and developing from within. You’ll thrive in a culture of belonging where you and your unique viewpoint matter.

Learn about the Danaher Business System (https://www.danaher.com/how-we-work/danaher-business-system) which makes everything possible.

At Danaher, the Senior Engineer, Application Security embeds security into the SDLC and product engineering. Enterprise AppSec strategy and standards are set by leadership/architecture; the Senior Engineer contributes to that architecture and owns hands-on execution - secure design reviews, threat modeling, testing, and developer enablement. The Senior Engineer works independently across product and platform teams that each own their own codebases and architectures.

This position reports to the Senior Director, Application, Product, and Manufacturing Security and is part of the Danaher Information Security (DIS) and will be fully remote.

In this role, you will have the opportunity to:

• Engineer AppSec testing at scale: SAST/DAST/SCA/secret scanning, IaC scanning, API and mobile security, and container/cloud-native app security in CI/CD.
• Architect/contribute secure-by-design patterns, paved roads, and release risk gates that product teams adopt.
• Build automation and guardrails (pipeline integrations, policy-as-code) to scale coverage.
• Support the sustainability model: secure-coding standards, SBOM/OSS-risk process, and VDP/bug-bounty intake workflows.