workday
Engineer III, Software
Thermofisher
Bengaluru, IND
Full-time
Senior · 6+ years experience
Onsite
Discovered 3 weeks ago
JenkinsGitHub ActionsGitLab CISBOM generationCycloneDXDependency-Track
Free
Job Fit Check
Base Career helps you apply smarter for this job.
?%
Ready to ScanKey skills for this role
JenkinsGitHub ActionsGitLab CI
Role Overview
We are seeking a Senior DevSecOps Engineer (6–10 years of experience) to lead security automation and tooling integration across MSD projects .
This role will focus on embedding security controls into the software delivery lifecycles specifically SBOM generation and quality improvement, secret scanning, and SAST integration —and automating security report generation and publishing into platforms such as Dependency-Track and DefectDojo .
You will work closely with engineering, DevOps, and security stakeholders to ensure scalable, repeatable, and measurable security practices are implemented through CI/CD pipelines, while continuously improving technical documentation and onboarding guidance for teams adopting these capabilities.
Key Skills for This Role
JenkinsGitHub ActionsGitLab CISBOM generationCycloneDXDependency-Track
Full Job Posting
Job Description
We are seeking a Senior DevSecOps Engineer (6–10 years of experience) to lead security automation and tooling integration across MSD projects . This role will focus on embedding security controls into the software delivery lifecycles specifically SBOM generation and quality improvement, secret scanning, and SAST integration —and automating security report generation and publishing into platforms such as Dependency-Track and DefectDojo .
You will work closely with engineering, DevOps, and security stakeholders to ensure scalable, repeatable, and measurable security practices are implemented through CI/CD pipelines, while continuously improving technical documentation and onboarding guidance for teams adopting these capabilities.
Key Responsibilities
- Integrate and operationalize security tooling within MSD projects, including:
- SBOM generation and validation
- Secret scanning
- SAST (Static Application Security Testing)
- Improve the quantity (coverage) and quality of generated SBOMs by defining standards, validation gates, and measurable KPIs (e.g., completeness, dependency accuracy, license metadata, component version resolution).
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Thermofisher
Sr Java Developer
Bengaluru, IND
Discovered YesterdayFull-time
Supervisor, Packaging Mechanic
Mississauga, CAN
Discovered 3 days agoFull-time
Supervisor Analytical Operations (Afternoon Shift)
Whitby, CAN
Discovered 3 days agoFull-time
Staff Engineer, Software
Hyderabad, IND
Discovered 3 days agoFull-time
Scientist II, Protein Biology
Bengaluru, IND
Discovered 3 days agoFull-time
Project Manager III
Hyderabad, IND
Discovered 3 days agoFull-time
Director / Senior Director FSP Operational Delivery Lead - EMEA
, GBR
Discovered 3 days agoFull-time
Sr Clinical Trial Coordinator - UAE
, UAE
Discovered 3 days agoFull-time