Software Security Engineer

1 month ago


Shanghai, China Thermo Fisher Scientific Full time

Software Security Engineer engages with product development teams across the organization and acts as a subject matter expert for providing mentorship related to secure software development practices.

Key responsibilities

As a software security engineer on the Product Security team, you will be responsible for promoting and implementing secure software development lifecycle (SDLC) practices, reviewing software security architecture and code, developing, and maintaining security tools and automation, and mentoring and training other engineers on security topics. You will also collaborate with product teams, security management, and other stakeholders to identify and drive process improvement initiatives and security metrics.

Work closely with development teams to identify and mitigate security risks in our software and systems. Implement and maintain security tools and processes to ensure the security of our software development lifecycle. Conduct security assessments and code reviews to identify vulnerabilities and ensure compliance with security standards and best practices. Develop and maintain secure coding guidelines and provide training to development teams. Collaborate with cross-functional teams to ensure the timely and successful delivery of secure software. Promote and implement Secure SDLC practices based on compliance requirements. Review software security practices and architecture as requested by product teams. Mentor and train less experienced team members on technical topics. Develop solutions to automate processes and workflows. Develop and promote automated scanning tools and practices throughout the organization. Identify and drive process improvement initiatives to increase our productivity and/or reduce costs. Lead security tool evaluations and Proof of Concepts to make defensible recommendations on tool acquisition, integration and maintenance plans. Develop metrics and reporting from aggregated sources to assist Software Security Management with remediation prioritization within the company. Contribute to the team’s strategy and long-term roadmap.

How will you get here?

Education

Bachelor's or Master’s degree in Engineering/Computer Science or equivalent work experience.

Experience

We are looking for candidates with 6+ years of experience in software development with a focus on security, including:

Experience writing and/or testing software applications; experience with automation. Experience working with container technologies and cloud providers such as AWS. Familiarity with one or more of the following languages: C/C++, Java, .NET, JavaScript, Python, Bash, PowerShell and/or Ruby. Familiarity with one or more development tools such as: Eclipse, Visual Studio, Visual Studio Code, IntelliJ, Git, Jira, Jenkins, and/or Docker. Strong attention to detail, with interpersonal and time management skills. The ability to communicate effectively and professionally with a diverse group of people, including Vice Presidents, Directors, Managers, Developers, Domain Experts.

Knowledge, Skills, Abilities

In addition to the experience requirements, we are looking for candidates with the following:

Self-motivated person with an agile attitude  A track record of performing application security assessments either via Bug Bounty programs or capture the flag events. Experience with mobile application security a plus. A history of involvement in general information security practice and/or the community. Proficient written and verbal communication in the English language.

  • Shanghai, Shanghai, China Thermo Fisher Scientific Full time

    Job DescriptionWhat we doThe Product Security team is a group of Builders, Breakers, and Fixers that specialize in collaborative security engagement. The goal of the Software Security (DevSecOps) team is to provide self-service security and to that end, the team is focused on enabling the 3 Ways of DevOps: Fast Flow, Rapid Feedback, and Continuous Learning....


  • Shanghai, China Thermo Fisher Scientific Full time

    Job DescriptionWhat we doThe Product Security team is a group of Builders, Breakers, and Fixers that specialize in collaborative security engagement. The goal of the Software Security (DevSecOps) team is to provide self-service security and to that end, the team is focused on enabling the 3 Ways of DevOps: Fast Flow, Rapid Feedback, and Continuous Learning....

  • Software Engineer

    3 months ago


    Shanghai, China Electronic Arts Full time

    Job Title: Software Engineer (Backend Security)-Java FC Mobile Shanghai Studio is devoted to the development and operation of a high-quality mobile game with top sports IP as a global team. The team also continuously delivers fantastic game experience to global users. The quest for creativity, respect for autonomy, and emphasis on collaboration are at the...

  • Software Engineer

    4 weeks ago


    Shanghai, China Electronic Arts Full time

    Job Title: Software Engineer (Backend Security)-Java FC Mobile Shanghai Studio is devoted to the development and operation of a high-quality mobile game with top sports IP as a global team. The team also continuously delivers fantastic game experience to global users. The quest for creativity, respect for autonomy, and emphasis on collaboration are at the...


  • Shanghai, China 0093 eBay Engineering&Research Full time

    Description : eBay’s Software-Defined Security Platform enables adaptive micro-segmentation of applications using a declarative policy model. The platform provides a robust policy language, scalable policy store and role-based access control for the governance of network policies. It also provides a dynamic and declarative enforcement mechanism that...


  • Shanghai, China 0093 eBay Engineering&Research Full time

    Description : eBay’s Software-Defined Security Platform enables adaptive micro-segmentation of applications using a declarative policy model. The platform provides a robust policy language, scalable policy store and role-based access control for the governance of network policies. It also provides a dynamic and declarative enforcement mechanism that...

  • Client Engineer

    3 months ago


    Shanghai, China Electronic Arts Full time

    As a client engineer, you will be responsible for ensuring the safety and security of our mobile clients. You will work closely with our software engineering and product teams to create and implement security measures that protect our mobile clients from potential threats and you will report to a Senior Software Engineer or Technical Director. Job location:...

  • Client Engineer

    4 weeks ago


    Shanghai, China Electronic Arts Full time

    As a client engineer, you will be responsible for ensuring the safety and security of our mobile clients. You will work closely with our software engineering and product teams to create and implement security measures that protect our mobile clients from potential threats and you will report to a Senior Software Engineer or Technical Director. Job location:...


  • Shanghai, Shanghai, China ZF Group Full time

    Your tasks Support the implementation of cyber security processes at CVS with the guide of a Cyber Security coach Keep CVS up-to-date regarding cyber security trends and emerging technologies Interacting with customers and suppliers to finalize security concepts Your profile: Major in Software Engineering, Information Engineering, etc Master...


  • Shanghai, China ZF Group Full time

    Your tasks Support the implementation of cyber security processes at CVS with the guide of a Cyber Security coach Keep CVS up-to-date regarding cyber security trends and emerging technologies Interacting with customers and suppliers to finalize security concepts Your profile: Major in Software Engineering, Information Engineering, etc ...


  • Shanghai, Shanghai, China ZF Group Full time

    Req ID 64867 Shanghai, China We are currently expanding our R&D teams and looking for new colleagues who will join our team in Shanghai.Your tasks:Support the implementation of cyber security processes at CVS with the guide of a Cyber Security coach Keep CVS up-to-date regarding cyber security trends and emerging technologies Interacting with customers and...


  • Shanghai, Shanghai, China ZF Group Full time

    Req ID 64867 Shanghai, China We are currently expanding our R&D teams and looking for new colleagues who will join our team in Shanghai.Your tasks:Support the implementation of cyber security processes at CVS with the guide of a Cyber Security coach Keep CVS up-to-date regarding cyber security trends and emerging technologies Interacting with customers and...


  • Shanghai, Shanghai, China ZF Group Full time

    Req ID 64867 Shanghai, China We are currently expanding our R&D teams and looking for new colleagues who will join our team in Shanghai.Your tasks:Support the implementation of cyber security processes at CVS with the guide of a Cyber Security coach Keep CVS up-to-date regarding cyber security trends and emerging technologies Interacting with customers and...


  • Shanghai, China Coca Cola Full time

    Description Summary: The Security Engineer will directly support organization-wide initiatives in delivering Security solutions in Greater China, and responsible for designing and implementing secure cloud computing solutions. You should have broad experience with IT security technologies and operations including but not limited to, endpoint...


  • Shanghai, Shanghai, China Ford Motor Company Full time

    Focus on Mobile App and Browser-based products' cybersecurity and act as cybersecurity SME Co-lead Vehicle/API Security Operations Center system design, development, deployment, and operations Provide cybersecurity technical services including but not limited to developing cybersecurity specifications, performing threat and risk assessment, performing...


  • Shanghai, China Ford Motor Company Full time

    Focus on Mobile App and Browser-based products’ cybersecurity and act as cybersecurity SME Co-lead Vehicle/API Security Operations Center system design, development, deployment, and operations Provide cybersecurity technical services including but not limited to developing cybersecurity specifications, performing threat and risk assessment, performing...

  • Client Engineer

    3 days ago


    Shanghai, China Electronic Arts Full time

    Responsibilities You will develop and implement security protocols for mobile applications. You will collaborate with software engineers to ensure the integration of security into all phases of software development. You will implement encryption and secure data storage solutions. You will document any security breaches and assess their damage. ...

  • Software Engineer

    4 weeks ago


    Shanghai, Shanghai, China Electronic Arts Full time

    Job Title: Software Engineer (Backend Security)-JavaFC Mobile Shanghai Studio is devoted to the development and operation of a high-quality mobile game with top sports IP as a global team. The team also continuously delivers fantastic game experience to global users. The quest for creativity, respect for autonomy, and emphasis on collaboration are at the...

  • Software Engineer

    2 months ago


    Shanghai, Shanghai, China Electronic Arts Full time

    Job Title: Software Engineer (Backend Security)-JavaFC Mobile Shanghai Studio is devoted to the development and operation of a high-quality mobile game with top sports IP as a global team. The team also continuously delivers fantastic game experience to global users. The quest for creativity, respect for autonomy, and emphasis on collaboration are at the...


  • Shanghai, Shanghai, China SAP Full time

    We empower individuals to unleash their full potentialJoining SAP means embracing a culture of teamwork and mutual dedication to improving global operations. Integrating advanced technologies, we strive daily to lay the groundwork for a better future while fostering diversity, flexibility, and purpose-driven work environments. Our collaborative and...