Product Security Engineer

Requisition ID: 33638

At Terumo Blood and Cell Technologies, our 7,000+ global associates are proud to come to work each day, knowing that what we do impacts the lives of patients around the world.

We make medical devices and related products that are used to collect, separate, manufacture and process various components of blood and cells. With our innovative technologies and service offerings, we touch a patients life every second of every day and are committed to continuing to increase the number of patients we serve.

With some of the best and brightest minds in the industry, an unmatched global footprint, comprehensive benefits and a distinct culture, Terumo Blood and Cell Technologies is a great place to work, grow and be part of a team that is focused on making a difference. Consider joining our team and unlock your potential.

JOB TITLE: Product Security Engineer

Job Summary

Terumo Blood and Cell Technologies designs, engineers, and builds medical technology that helps save lives. Terumo believes in integrating security into all aspects of our product development lifecycle. The Product Security Engineer partners with the software development team to refine, implement, and support strategies designed to ensure the delivery of secure software and related systems.

Essential Duties

• Consults on the design and implementation of cybersecurity capabilities for Terumo Blood and Cell Technologies products, the prioritization and application of cybersecurity requirements for those products, and the design and implementation of mitigation of cybersecurity defects and risks.
• Works with the Research & Development product teams to address gaps in the design of common cybersecurity controls, develops and maintains the product security test lab environment, works with product security architects to set baseline cybersecurity requirements, prototypes cybersecurity solutions, and does research and education to keep current on cybersecurity topics.
• Facilitates cybersecurity risk management activities, such as performing technical assessments of cybersecurity risk, and periodic assessment of an accepted or deferred risk.
• Works with the Research & Development product teams and the product security architects to understand the technical implementation of a cybersecurity framework for Terumo Blood and Cell Technologies products.
• Provides operational oversight of product security program requirements.
• In collaboration with product security analysts, maintains product security secure-by-design lifecycle procedures, work instruction, and technical guidance documents.

• Supports vendor management as needed.
• Participates in regulatory and safety reviews.
• May perform product penetration testing activities.
• May perform product security incident response activities.
• May perform product security vulnerability management activities.
• May be required to travel to other company locations on occasion.

Education

Bachelors degree in Computer Science or, equivalent of education and experience sufficient to successfully perform the essential functions of the job may be considered.

Experience

Minimum 5 years experience

• Experience conducting product and/or cyber security practices in a regulated industry or environment; knowledge of global standards and frameworks (ISO, NIST, FDA, ITIL, EUMDR, etc.) strongly preferred.
• Professional certification in cyber security practices (CISSP, CEH, or similar) preferred.

• Working knowledge of modern software development practices, including Scrum Agile and shift-left methodologies
• Experience using risk analysis and mitigation methodologies.
• Quality and continuous improvement mindset.
• Demonstrated ability to communicate effectively both verbally and in writing.

-Or-

An equivalent competency level acquired through a variation of these qualifications may be considered.

Physical Requirements

Typical Office Environment requirements include: reading, speaking, hearing, close vision, walking, bending, sitting, and occasional lifting up to 20 pounds.

The physical demands described here are representative of those that must be met by an associate to successfully perform the essential duties of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential duties.

• Terumo Blood and Cell Technologies is part of Terumo Group, founded in 1921 and headquartered in Tokyo, Japan.
• In 2019, Terumo Blood and Cell Technologies reached $1 billion in revenue.
• We employ nearly 7,000 associates globally, with global headquarters in Lakewood, CO, U.S., and regional headquarters in Brussels, Buenos Aires, Singapore and Tokyo.
• We manufacture devices, disposable sets and solutions at our facilities in Belgium, India, Japan, Northern Ireland, the U.S. and Vietnam. Our global presence enables us to serve customers in more than 130 countries.
• Our core values help set our direction, guide our actions and keep us true to our corporate mission of contributing to society through healthcare.
• Respect Appreciative of others
• Integrity Guided by our mission
• Care Empathetic to patients
• Quality Committed to excellence
• Creativity Striving for innovation