About the Role Fabric handles protected health information at scale across 75+ health systems and millions of patient encounters. Security is not a layer we add at the end. It is built into how we work. As a Senior Application Security Engineer, you will own the application security practice at Fabric, partnering directly with engineering to embed security throughout the development lifecycle, build the tooling and automation that keeps our platform secure, and ensure our applications meet the compliance standards our health system customers require. This is a new headcount reporting to the VP of Infrastructure. What You'll Do As a Senior Application Security Engineer, you will be the driving force behind application security at Fabric, operating as a partner to engineering rather than a gatekeeper. Your primary responsibilities will include: - Secure Development & Code Review: Partner with engineering teams to embed security throughout the SDLC across Fabric's Ruby on Rails, Python, React, and Node.js applications. Conduct security-focused code reviews and provide actionable guidance on secure coding practices. - Threat Modeling & Assessment: Lead threat modeling exercises for new features and architectural changes. Conduct application penetration testing and vulnerability assessments across the platform, prioritizing findings and working directly with engineering to drive remediation. - DevSecOps & Tooling: Implement and manage SAST and DAST tooling integrated into CI/CD pipelines. Build security guardrails and automated checks that allow engineering to move fast without introducing risk to the platform or patient data. - Compliance & Risk: Ensure application security practices meet HIPAA, SOC 2, and HITRUST requirements. Assess third-party integrations and APIs for security risk, including EHR integrations with Epic and Cerner. - Security Education & Culture: Run secure coding training and awareness programs for engineering teams. Serve as the internal subject matter expert on application security and lead response to application-layer security incidents. Why You Might Be a Good Fit - You think like an attacker and build like an engineer. You are as comfortable in a codebase as you are writing a threat model. - You understand that in healthcare, a vulnerability is not just a technical problem. It is a patient safety and compliance problem. - You prefer building guardrails and education programs over reactive patching. - You can communicate security risk to engineering teams in a way that drives action, not defensiveness. - You are energized by building a security practice and shaping how a fast-growing company approaches application security. This Might Not Be The Right Fit If... - You are primarily a compliance or GRC-focused security professional and are not comfortable getting into the code. - You prefer working in a mature, established security program over building and defining one. - You are not comfortable working closely with engineering as a partner rather than an oversight function. - You do not have experience in a regulated environment where security decisions carry direct compliance implications. Your Qualifications - 5+ years of experience in application security with hands-on experience in security assessments, penetration testing, and secure code review. - Proficiency in at least one language in Fabric's stack: Ruby, Python, JavaScript/TypeScript, or similar. - Experience integrating SAST and DAST tooling into CI/CD pipelines. - Deep understanding of the OWASP Top 10 and common application vulnerabilities. - Experience with threat modeling methodologies. - Familiarity with cloud security in AWS environments. - Understanding of HIPAA or other regulated industry security requirements. Bonus Points - Experience securing healthcare applications or working with PHI. - Familiarity with EHR integration security including FHIR, HL7, Epic, or Cerner APIs. - Security certifications such as OSCP, GWEB, or BSCP. - Experience with bug bounty program management. - SOC 2 or HITRUST audit support experience. The national pay range for this role is $130,000.00 – $160,000.00 per year. Actual compensation will be determined by factors such as the candidate's geographic market, experience, skills, and qualifications. Certain roles may also be eligible for additional compensation, including a comprehensive benefits package such as medical, dental, vision, unlimited PTO, and a 401(k) plan, stock options and bonuses. If your compensation requirement is greater than our posted range, please still consider applying; a determination can be made based on unique qualifications. Expected compensation ranges for this role may change over time.

• You design innovative solutions together with our customers by translating complex requirements across IT infrastructure, shop floor, and end-user applications with clarity and pragmatism. • You take responsibility for technical onboarding of customers and partners. • You advise on IIoT architectures, IT security, Connectware integration, and relevant use cases. • You implement industrial data infrastructures using Cybus Connectware. • You implement scalable Infrastructure-as-Code deployments. • You support our customers with technical product support, including participation in a team-rotating on-call duty.

• Become an expert user of the Hivemind enterprise software stack. • Conduct significant travel (~50%) to other Shield AI sites for demos, team offsites, etc. • Provide technical support and training to customers. • Develop AI & Autonomy applications using the Shield AI enterprise software development kit. • Assist the sales team in pre-sales activities, e.g., demos. • Assist in post-sales deployment and integration of Shield AI enterprise software products. • Develop and maintain technical documentation and training materials. • Troubleshoot and resolve technical issues. • Help customers debug software/API integration issues. • Collaborate with the engineering team to address customer feedback and improve products.

Work Schedule Standard (Mon-Fri) Environmental Conditions Able to lift 40 lbs. without assistance, Adherence to all Good Manufacturing Practices (GMP) Safety Standards, Office, Some degree of PPE (Personal Protective Equipment) required (safety glasses, gowning, gloves, lab coat, ear plugs etc.) Job Description As part of the Thermo Fisher Scientific team, you'll discover meaningful work that makes a positive impact on a global scale. Join our colleagues in bringing our Mission to life every single day to enable our customers to make the world healthier, cleaner and safer. DESCRIPTION: We are seeking an experienced Field Service Engineer to join our BioProduction Service and Support team at Thermo Fisher Scientific. In this crucial role, you'll contribute by ensuring our sophisticated scientific instruments operate at peak performance, with a focus on Single Use Technology (SUT) hardware and automation products. You'll represent our company, delivering exceptional technical service while building strong relationships with customers who are advancing critical research and innovation in the bioproduction sector. KEY RESPONSIBILITIES: - Travel to customer sites across Switzerland (primarily), France, and Germany to install, service, update, and repair Thermo Fisher SUT hardware and automation products - Provide expert technical support and problem-solving for our cutting-edge bioproduction equipment - Conduct installations, maintenance, and repairs on a diverse range of high-value analytical instruments - Perform commissioning and qualification of equipment by implementing Site Acceptance Test (SAT) and Installation/Operational Qualification (IQ/OQ) Protocols - Combine technical expertise with superior customer service skills to address complex issues and support our customers in achieving breakthrough discoveries - Collaborate with internal partners to resolve customer issues and improve processes - Provide basic product training and technical assistance on our instrumentation to our customers and internal Sales team - Report all activities on Sales Force Service desk, providing customer feedback to management, hardware and software groups - Aid in optimizing revenue and new product development opportunities; Assist in demonstration of our products to potential customers - Maintain technical competency by attending trainings, employee meetings and remaining up to speed on new products, markets, customers and competitor This is a field-based position that will initially focus on supporting customers across Switzerland, with occasional travel to France and Germany. As you grow in your role, you'll have the opportunity to support the full EMEA region. The position requires frequent travel on a weekly basis (75-100% of work time) to sites across EMEA. When not travelling, you'll have the flexibility to work from home. REQUIREMENTS: - Bachelor's Degree in Engineering (Electrical, Electronics, Mechanical, Biomedical or a related scientific field) or equivalent Advanced Degree plus 3 years of experience - Proven experience installing, troubleshooting, and repairing sophisticated analytical instruments, particularly in the bioproduction sector - Strong electronics and mechanical aptitude with the ability to diagnose issues down to the component level - Excellent customer service skills and professional demeanor - Strong verbal and written communication abilities - Fluency in English required; proficiency in German and French highly desirable - Demonstrated problem-solving capabilities and analytical thinking - Proficiency with Windows operating systems, MS Office, and service management software - Ability to read and interpret technical diagrams, schematics, and documentation - Valid driver's license and ability to travel 75-100% of the time (away from home Monday through Friday is typically expected) - Physical ability to lift up to 25 kg and stand for extended periods - Experience with bioproduction equipment, particularly Single Use Technology (SUT) hardware and automation products - Availability to work flexible hours and respond to emergency service calls - Must be able to obtain necessary credentials to access customer facilities - Strong organizational skills and ability to manage time effectively - Collaborative mindset with the ability to work independently in the field - Willingness to support the full EMEA region as the role develops - Self-sufficient; comfortable working independently; logical approach in setting work priorities At Thermo Fisher Scientific, we provide our global teams with the resources needed to achieve individual career goals while helping to take science a step beyond by developing solutions for some of the world's toughest challenges in bioproduction and beyond.