Product Security Strategist

Work Schedule

Environmental Conditions

Job Description

When you’re part of the team at Thermo Fisher Scientific, you’ll do important work, like helping customers to find cures for cancer, protecting the environment or making sure our food is safe. Your work will have real-world impact, and you’ll be supported in achieving your career goals!

This role is a member of the Corporate Infrastructure & Security (CIS), Pre-Market Product Security, Strategy & Enablement team. Our job is to guide Thermo Fisher product development and sustainment teams in incorporating security concepts and controls in the design of new and existing consumer products and platforms.

How will you make an impact?

By enabling our product development teams, you will help ensure that Thermo Fisher products are developed and tested against security standards, further helping our customers to make the world healthier, cleaner and safer!

What will you do?

The Product Security Strategist partners with product and portfolio managers, R&D, software engineers, regulatory, and business teams to help integrate cybersecurity into product planning, development, and lifecycle management activities. This role helps ensure product teams understand and effectively leverage product security services, requirements, and best practices throughout the product lifecycle.

The individual will work closely with stakeholders across the organization to coordinate security activities, support regulatory readiness efforts, improve operational processes, and help align security engagements with product development timelines and business priorities. Success in this role requires strong communication, collaboration, organizational skills, and a solid understanding of cybersecurity and product security principles.

Key Responsibilities

This role helps enable successful delivery of product security services by partnering with stakeholders, coordinating security activities, and supporting the integration of cybersecurity requirements into product development and sustainment efforts.

• Partner with product teams and business teams to understand product priorities and support product security engagement planning.
• Coordinate security activities and services, helping ensure the right assessments and guidance are delivered at the appropriate stages of the product lifecycle.
• Assist teams in understanding cybersecurity requirements, regulatory expectations, and available product security services.
• Support workload management, intake processes, engagement tracking, documentation, and reporting across the Pre-Market Product Security organization.
• Contribute to process improvements, playbooks, guidance, and operational initiatives that improve efficiency, consistency, and stakeholder experience.

How will you get here?

• Bachelor’s degree in information assurance, Information Security, Management Information Systems, Risk Management, or Computer Science. We will also consider equivalent field experience.
• 4+ years of related work experience with product security, secure software development, risk assessment, or vulnerability management
• Experience working with product development, engineering, security, quality, regulatory, or business teams in a collaborative or advisory capacity.
• Experience coordinating projects, initiatives, assessments, or cross-functional work efforts in a matrixed organization.
• Experience supporting cybersecurity, product security, compliance, or risk management activities is preferred.
• Relevant certifications (e.g., Security+, CISSP, SSCP, GSEC, CISM, PMP, Agile, Scrum) are a plus.

Knowledge, Skills, Abilities

The ideal candidate combines cybersecurity knowledge, strong organizational skills, and the ability to build effective working relationships across a global organization. They are comfortable navigating both technical and business discussions and helping stakeholders understand and address security requirements.

• Understanding of cybersecurity and product security concepts, including secure development practices, threat modeling, vulnerability management, security testing, and risk assessment.
• Ability to communicate technical concepts clearly and effectively to both technical and non-technical audiences.
• Strong organizational, project management, and problem-solving skills with the ability to manage multiple priorities simultaneously.
• Experience collaborating with cross-functional teams and building productive relationships across engineering, product, security, quality, and regulatory functions.
• Familiarity with cybersecurity regulations, frameworks, and standards such as the EU Cyber Resilience Act (CRA), FDA cybersecurity guidance, NIST, OWASP, or similar industry practices.