Scott Spencer

Senior Security Engineer with 20+ years of experience designing and leading enterprise vulnerability management and security architecture programs across global infrastructure environments supporting 300,000+ assets. Proven record of building scalable scanning architectures, risk-based remediation programs, and executive security reporting that drive measurable enterprise risk reduction. Experienced partnering with infrastructure, cloud, and engineering teams to strengthen enterprise security posture across regulated environments.

Senior Security Engineer, Vulnerability Management at Thermo Fisher Scientific (2020-01 – Present)

• Architect and lead the enterprise vulnerability management platform supporting 300,000+ assets across 900+ global locations, providing enterprise-wide visibility into infrastructure and cloud security risk.
• Led full enterprise migration from Rapid7 to Qualys, designing the platform architecture, scanner deployment model, authentication strategy, and global scanning policies to support hybrid infrastructure environments.
• Designed and implemented enterprise vulnerability scanning architecture including authenticated scanning, agent-based coverage, asset segmentation models, and scalable global scan scheduling.
• Developed the enterprise vulnerability lifecycle management framework establishing processes for discovery, triage, risk scoring, remediation tracking, and executive reporting.
• Implemented risk-based vulnerability prioritization using CVSS and contextual risk analysis to focus remediation on business-critical systems.
• Built executive security dashboards and reporting metrics used by cybersecurity leadership and the CTO to track remediation performance and enterprise risk posture.
• Integrated vulnerability intelligence from Qualys, Wiz, and Orca to expand visibility across hybrid infrastructure and cloud workloads.
• Partner with infrastructure, cloud, and engineering teams to drive enterprise vulnerability remediation programs and security hardening initiatives.
• Support regulatory and audit requirements through PCI vulnerability scanning and compliance reporting aligning processes with NIST CSF and CIS Controls.
• Provide regular security posture updates to executive leadership communicating emerging threats, remediation progress, and enterprise vulnerability risk trends.

Major Incident Manager at Thermo Fisher Scientific (2018-01 – 2020-12)

• Led enterprise incident bridges coordinating engineering teams during high-severity outages and security events.
• Delivered executive communication and technical coordination to restore critical services rapidly.
• Identified systemic operational weaknesses and partnered with engineering teams to implement long-term remediation and operational improvements.

Network Operations / Service Desk (Multiple Roles) at Comcast Cable Corporation (2004-01 – 2018-12)

• Supported large-scale network infrastructure operations across enterprise cable environments.
• Served as escalation point for major outages coordinating cross-team remediation activities.
• Monitored backbone network infrastructure and collaborated with engineering teams to restore services.

Associate Degree in Electronics Engineering Technology – ITT Technical Institute