Lead Engineer, Manufacturing Security

Danaher Corporation

Confirmed live yesterday High trust
Remote

Quick summary

Work type
Remote
Location
Remote
Salary
$150,000–$180,000 / yr
Posted
2 days ago
Freshness
Confirmed live yesterday

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $180k
This role $165k
$125k most similar roles pay here $224k

This role pays less than 61% of similar roles. Most pay $151,475–$208,800 — the shaded band above. At the midpoint, this role pays about $165k versus about $180k for comparable roles.

Based on 240 similar postings.

Employer

About Danaher Corporation

Danaher Corporation is a leading global science and technology innovator focused on biotechnology, diagnostics, and life sciences.

Danaher Corporation currently has 32 open roles on FindRole.

Listed pay typically runs $150,000–$177,500 across 28 roles with salary data.

Most-posted roles

View all roles at Danaher Corporation

At a glance

TL;DR · Lead Engineer, Manufacturing Security

Lead Engineer, Manufacturing Security serves as a senior technical resource within the Corporate Information Security team, focusing on industrial cybersecurity for the life sciences sector. The role involves translating enterprise OT architecture standards into site-specific implementation plans, including network segmentation, firewall deployment, and DMZ construction across various operating companies. You will manage production-sensitive changes to ensure manufacturing systems remain operational while implementing security controls. Key responsibilities include developing engineering designs for VLAN topology and access control rules, managing remote access transitions, and building the technical knowledge base for OT security. Required expertise includes industrial firewalls like Fortinet or Palo Alto, protocols such as Modbus and Profinet, and standards including IEC 62443 and NIST SP 800-82. Experience with assets like PLCs, SCADA, and HMI systems is essential to secure complex manufacturing environments.

What you'll do

  • Lead the design and delivery of OT network security improvements across a portfolio of operating companies.
  • Translate enterprise OT architecture standards into site-specific implementation plans for network segmentation and firewall deployment.
  • Serve as the primary technical point of contact to translate architectural blueprints into executable engineering designs.
  • Manage the execution of network changes during production windows to ensure no disruption to manufacturing processes.
  • Deploy OT remote access controls by replacing legacy systems with approved, monitored, and controlled methods.
  • Build an engineering knowledge base including site-specific architecture decisions, implementation playbooks, and as-built diagrams.
  • Implement compensating controls for end-of-life or legacy assets within active manufacturing environments.

What we're looking for

  • 10+ years of experience in OT/ICS security engineering or industrial network engineering.
  • Experience designing and implementing OT network segmentation, including VLAN architecture, firewall configuration, and DMZ builds.
  • Ability to lead OT network change projects in production-sensitive environments without causing unplanned downtime.
  • Deep familiarity with OT/ICS components (PLCs, DCS, SCADA, HMI) and protocols like Modbus, Profinet, EtherNet/IP, OPC-UA, and BACnet.
  • Working knowledge of IEC 62443, NIST SP 800-82, and ISA-99 standards for network segmentation and zone access controls.
  • Experience managing concurrent projects across multiple operating companies with different OT environments and governance models (preferred).
  • Familiarity with OT asset discovery and network visibility platforms such as Claroty, Nozomi Networks, Dragos, or Armis (preferred).
  • Ability to travel 25% of the time.

More like this

Similar roles

Senior Engineer, Application Security

Danaher Corporation

Remote 21 days ago $150,000$200,000
Application Security SAST DAST SCA IaC Scanning CI/CD Kubernetes API Security SBOM Snyk Veracode Checkmarx Semgrep GitHub Advanced Security Policy-as-Code Threat Modeling
9+ yrs exp Remote

Senior SIEM Engineer

Danaher Corporation

Remote 51 days ago $155,000$175,000
SIEM Splunk Microsoft Sentinel CrowdStrike Palo Alto XSIAM Google SecOps Cribl Databahn Bindplane Vector AWS Azure GCP Python Bash PowerShell Infrastructure as Code Linux UNIX
5+ yrs exp Remote

Senior Engineering Manager, Operational Technology Security

Target

Brooklyn Park, MN 23 days ago $132,000$238,000
OT Security ISA/IEC 62443 NIST CSF NIST SP 800-82 Python Go Terraform CI/CD Infrastructure as Code EDR Claroty XDome Nozomi Dragos Armis Tenable OT Network Segmentation Data Engineering
8+ yrs exp Hybrid

Controls Engineer, Manufacturing Automation

Anduril Industries

Costa Mesa, CA 8 days ago $123,000$171,000
Ignition SCADA PLC Allen-Bradley Siemens MQTT OPC UA TCP/IP VLAN AWS EC2 OT Security IEC 62443 NIST 800-82 SQL SolidWorks NX CATIA AutoCAD
4+ yrs exp

Controls Engineer, Manufacturing Automation

Anduril Industries

Costa Mesa, CA 8 days ago $123,000$171,000
PLC Ignition SCADA Allen-Bradley Siemens MQTT OPC UA TCP/IP VLAN AWS EC2 OT Security IEC 62443 NIST 800-82 SQL SolidWorks NX CATIA AutoCAD
4+ yrs exp

Technical Security Application Engineer, Manufacturing

Anduril Industries

Ashville, OH 21 days ago $126,000$167,000
Genetec Security Center Omnicast Synergis Physical Access Control Systems (PACS) IP Networking VLANs PoE Low-Voltage Systems Structured Cabling Wiring Diagrams Project Management