Senior Product Penetration Tester

As a Senior Product Penetration Tester, you will be part of a collaborative team passionate about identifying and reducing product risk across Thermo Fisher Scientific’s diverse portfolio. You’ll conduct comprehensive security assessments across software, hardware, and cloud environments to identify vulnerabilities and provide actionable recommendations that strengthen the security posture of our products. The ideal candidate will have a strong background in penetration testing and experience with a variety of technologies and tools. This position offers the opportunity to develop deep technical expertise while directly improving the security of the technologies advancing science and healthcare.

A Day in the Life

• Lead and independently complete complex, open-box penetration tests across diverse technologies, including APIs, cloud environments, embedded systems, web applications, and AI/ML workloads.
• Serve as a technical leader for advanced security assessments, focusing on complex architectures and new technologies.
• Prepare detailed reports to effectively communicate findings and recommendations to technical and non-technical collaborators.
• Partner with cross-functional collaborators, including product engineering and management, security architecture, and incident response to drive remediation and strengthen product security throughout the development lifecycle.
• Mentor junior team members while encouraging a collaborative and knowledge-sharing environment.
• Contribute to internal tooling, automation, and methodology improvements to improve testing and technical precision.
• Stay informed on new technologies, attack techniques, and threat trends to proactively identify potential vulnerabilities.

Experience

• Strong and proven years of hands-on experience in offensive security, passionate about penetration testing or vulnerability research.
• Demonstrated ability to independently perform advanced testing on various technologies including web applications, APIs, cloud infrastructure, and embedded or desktop platforms.
• Demonstrated expertise in modern attack methodologies, exploit development, and secure architecture principles.
• Proven ability to develop clear, actionable technical reports and clearly present results to audiences with varying technical backgrounds.
• Experience collaborating with cross-functional teams to support remediation and drive security improvements.
• Bachelor’s or Master’s Degree in Cybersecurity, Computer Science, Engineering, or related field. Equivalent professional experience considered.

Knowledge, Skills, and Abilities

• Strong knowledge of common and emerging vulnerabilities (OWASP Top 10, MITRE ATT&CK, cloud misconfigurations, supply chain risks).
• Proficient with industry tools (Burp Suite Pro, Nmap, Metasploit, cloud-native assessment tools).
• Deep understanding of network protocols and OS internals (Windows, Linux).
• Familiar with cybersecurity frameworks and regulations (OWASP, NIST, FDA, CRA).
• Experience securing cloud-native architectures.
• Scripting and exploit development experience (Python, PowerShell, Go).
• Working knowledge of compiled languages (C, C++, C#) with ability to assess code for security issues.
• Experience developing testing methodologies and technical documentation.

Benefits

We offer competitive remuneration, annual incentive plan bonus, healthcare, and a range of employee benefits. Thermo Fisher Scientific offers employment with an innovative, forward-thinking organization, and outstanding career and development prospects. We offer an exciting company culture that stands for integrity, intensity, involvement, and innovation!