Waters Corporation
Application Security Specialist Engineer - InfoSec
Full details on LinkedIn
The complete job description, requirements, and application details are available on the original posting.
About Waters Corporation
Waters Corporation is a global leader in analytical instruments, focusing on chromatography, mass spectrometry, separations technologies, thermal analysis, and related software. Founded in 1958 in Framingham, Massachusetts, the company has a rich history of innovation, including pioneering liquid chromatography and developing key products like the GPC-100 Gel Permeation Chromatography System and the ACQUITY UPLC M-Class. Waters provides comprehensive analytical workflows that support research, development, quality control, and manufacturing across various sectors. Their offerings include advanced chromatography systems and columns, mass spectrometry solutions, thermal analysis tools, and informatics software. The company serves diverse markets such as pharmaceuticals, life sciences, food and beverage, materials science, and environmental applications, ensuring safety in medicines, food purity, and water quality.
Security at Waters Corporation
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
- The Waters cloud cybersecurity program focuses on the integrity, confidentiality, and availability of systems and data.
- AppSec philosophy emphasizes integrating security tools into developer workflows, employing a defense-in-depth framework, and ensuring vulnerabilities are accurately identified, contextualized, triaged, and remediated.
Security Team
Key Public-Facing Leader: Mike Teachout, Director of Information Security. Team Size Estimate and Org Structure information not publicly available. Active AppSec Job Postings: 1 (Application Security Specialist Engineer - InfoSec). Common Skill/Tool Patterns include familiarity with application security tooling ecosystems (SAST, SCA, DAST, IaC, secrets scanning).
Key Initiatives
- Shift Left in Practice: ensuring full CI/CD integration and high-fidelity results.
- Vulnerability Management Process includes intake with vulnerability triage across SAST, SCA, DAST, IaC, secrets, and container scanning tools.
- Triage/Remediation involves creating, tracking, and managing remediation tickets with engineering teams, enforcing SLAs and structured workflows.
- Secure SDLC Artifacts: maintaining accurate application and service inventories, including classification by criticality, exposure, and data sensitivity.
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.