Cybersecurity Engineer
Clario
IndiaremotePosted 23 days ago
Skill Required
Cybersecurity-EngineeringApplication-SecurityProduct-SecurityDevSecOpsSecurity-EngineeringCybersecurity-EngineerCybersecurity-Software-EngineerSecurity-EngineerCybersecurity-Systems-EngineerSenior-Cybersecurity-EngineerLead-Cybersecurity-EngineerCyber-Defense-EngineerInformation-Security-EngineerCloud-Cybersecurity-EngineerCybersecuritysoftware engineeringPenetration TestingCloud Securityrelated fieldOWASPCD pipelinesGCPEngineeringR ProgrammingJavaScriptanalyticalautomationShell ScriptingsecurityTestNGPythondesignDevOpsAzureCI/CDAgileCloudDesign PatternsJavaFulltime
Key highlights
- 5+ years of experience in Cybersecurity, Application Security, Product Security, Security Engineering, or a related field required
- Must have demonstrated experience performing manual and automated penetration testing of web applications, APIs, cloud environments, and supporting infrastructure
- Must have strong experience conducting threat modeling and security architecture reviews using established methodologies such as STRIDE, PASTA, ATT&CK, or equivalent frameworks
- Must have solid understanding of secure software development practices, common attack techniques, and security vulnerabilities, including the OWASP Top 10 and API Security Top 10
- Clario offers competitive compensation, provident fund and medical insurance, engaging employee programs and local events, modern office spaces and remote work flexibility
- Must have willingness to work in European Shift (1pm to 10pm)
Role overview
Clario, part of Thermo Fisher Scientific, is seeking a highly skilled Cybersecurity Engineer to strengthen their Product Security and DevSecOps capabilities. The role focuses on penetration testing, threat modeling, secure design reviews, and security automation across web applications, APIs, cloud environments, and infrastructure. The ideal candidate will partner with Product, Engineering, Architecture, and DevOps teams to embed security-by-design principles throughout the SDLC, develop security automation, and drive continuous improvement across Clario's Product Security program.
Responsibilities
- Conduct comprehensive security assessments across web applications, APIs, cloud environments, and supporting infrastructure to identify vulnerabilities and validate security controls.
- Partner closely with Product, Engineering, Architecture, and DevOps teams to perform threat modeling exercises, review security architectures, and embed security-by-design principles throughout the Software Development Lifecycle (SDLC).
- Evaluate application, cloud, and infrastructure security controls and provide actionable recommendations to reduce risk and improve overall security posture.
- Conduct comprehensive penetration testing of web applications, APIs, cloud environments, and supporting infrastructure to identify security vulnerabilities and validate security controls.
- Lead threat modeling exercises for new and existing products, partnering with engineering and architecture teams to identify risks, attack paths, and appropriate mitigations early in the SDLC.
- Perform secure design and architecture reviews to ensure products are built with security-by-design principles and aligned with industry standards and best practices.
- Willingness to work in European Shift (1pm to 10pm).
- Work closely with development teams to prioritize, track, and remediate security findings while promoting secure coding practices.
- Integrate security testing and validation into CI/CD pipelines, enabling automated security checks and continuous risk identification throughout the development lifecycle.
- Develop and maintain security tooling, scripts, and automation capabilities that improve the efficiency and effectiveness of security assessments.
- Collaborate with Product, Engineering, DevOps, and Architecture teams to embed security requirements into product planning, design, development, and deployment processes.
- Support vulnerability management activities, including validation, risk assessment, remediation guidance, and verification of fixes.
- Contribute to the development and maintenance of security standards, secure development guidelines, and product security processes.
- Stay current on emerging threats, attack techniques, vulnerabilities, and security technologies, applying that knowledge to improve Clario's security capabilities.
- Provide technical guidance and mentorship to engineering teams on secure design, threat mitigation, and security best practices.
- Assist with security audits, compliance initiatives, and evidence collection activities related to product and application security controls.
- Drive continuous improvement of Clario's Product Security and DevSecOps programs through innovation, automation, and the adoption of industry-leading practices.
- Support regulatory, compliance, or audit requirements in highly regulated industries such as healthcare, life sciences, or financial services.
Requirements
- Bachelor's degree in Computer Science, Cybersecurity, Information Security, Software Engineering, or a related technical discipline, or equivalent practical experience.
- 5+ years of experience in Cybersecurity, Application Security, Product Security, Security Engineering, or a related field.
- Demonstrated experience performing manual and automated penetration testing of web applications, APIs, cloud environments, and supporting infrastructure.
- Strong experience conducting threat modeling and security architecture reviews using established methodologies such as STRIDE, PASTA, ATT&CK, or equivalent frameworks.
- Solid understanding of secure software development practices, common attack techniques, and security vulnerabilities, including the OWASP Top 10 and API Security Top 10.
- Experience identifying, validating, and communicating security risks to technical and non-technical stakeholders.
- Proficiency in one or more programming or scripting languages such as Python, Java, JavaScript, C#, PowerShell, Go, or similar languages.
- Experience working within Agile development environments and integrating security practices into the SDLC.
- Strong understanding of DevSecOps principles and experience integrating security tools into CI/CD pipelines.
- Excellent analytical, problem-solving, communication, and collaboration skills.
- Ability to independently drive security initiatives while partnering effectively with Engineering, Product, Architecture, and Operations teams.
- Experience with cloud security assessments and securing environments in AWS, Azure, or Google Cloud Platform.
- Experience with modern application architectures including microservices, APIs, containers, Kubernetes, and serverless technologies.
- Familiarity with Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), Container Security, and Infrastructure-as-Code security tools.
Nice to have
- Experience developing security automation, custom security tooling, or pipeline integrations to improve security coverage and efficiency.
- Knowledge of secure architecture patterns, identity and access management, cryptography, and zero-trust security concepts.
- Experience supporting regulatory, compliance, or audit requirements in highly regulated industries such as healthcare, life sciences, or financial services.
- Security certifications such as OSCP, OSWE, GWAPT, GWEB, CISSP, CCSP, or cloud security certifications (Azure, AWS, or GCP).
- Building or operating Product Security programs.
- Leading enterprise-wide threat modeling initiatives.
- Conducting red team or adversarial security assessments.
- Creating security standards, secure coding guidance, or developer training programs.
- Leveraging AI-assisted security analysis, remediation workflows, or security engineering automation.
Benefits
- Competitive compensation
- Provident fund and medical insurance
- Engaging employee programs and local events
- Modern office spaces and remote work flexibility
Additional details
- Time Allocation (Typical): 30–55% Product Security Engineering (Threat Modeling, Secure Design Reviews, Security Architecture Assessments, Developer Enablement); 30–55% Penetration Testing and Security Validation Activities; 10–15% Security Automation, DevSecOps Integration, Governance, and Process Improvement.
- The Department Head has the discretion to hire personnel with a combination of experience and education, which may vary from the above listed qualifications.
- EEO Statement: Clario is an equal opportunity employer. Clario evaluates qualified applicants without regard to race, color, religion, gender, national origin, age, sexual orientation, gender identity or expression, protected veteran status, disability/handicap status, or any other legally protected characteristic.