Product Security Engineer

Requisition ID:  33555  

 

At Terumo Blood and Cell Technologies, our 7,000+ global associates proud to come to work each day, knowing that what we do impacts the lives of patients around the world. For Terumo, for Everyone, Everywhere.

 

We make medical devices and related products that are used to collect, separate, manufacture and process various components of blood and cells. With our innovative technologies and service offerings, we touch a patient’s life every second of every day and are committed to continuing to increase the number of patients we serve. Advancing healthcare with heart.

 

 

With some of the best and brightest minds in the industry, an unmatched global footprint, comprehensive benefits and a distinct culture, Terumo Blood and Cell Technologies is a great place to work, grow and be part of a team that is focused on making a difference. Join us and help shape wherever we go next. You create your future and ours.

Product Security Engineer

 

JOB SUMMARY

Terumo Blood and Cell Technologies designs, engineers, and builds medical technology that helps save lives.  Terumo believes in integrating security into all aspects of our product development lifecycle.  The Product Security Engineer partners with the software development team to refine, implement, and support strategies designed to ensure the delivery of secure software and related systems. 

 

ESSENTIAL DUTIES

• Consults on the design and implementation of cybersecurity capabilities for Terumo Blood and Cell Technologies products, the prioritization and application of cybersecurity requirements for those products, and the design and implementation of mitigation of cybersecurity defects and risks.
• Works with the Research & Development product teams to address gaps in the design of common cybersecurity controls, develops and maintains the product security test lab environment, works with product security architects to set baseline cybersecurity requirements, prototypes cybersecurity solutions, and does research and education to keep current on cybersecurity topics.
• Facilitates cybersecurity risk management activities, such as performing technical assessments of cybersecurity risk, and periodic assessment of an accepted or deferred risk.
• Works with the Research & Development product teams and the product security architects to understand the technical implementation of a cybersecurity framework for Terumo Blood and Cell Technologies products.
• Provides operational oversight of product security program requirements.
• In collaboration with product security analysts, maintains product security secure-by-design lifecycle procedures, work instruction, and technical guidance documents.

 

OTHER DUTIES AND RESPONSIBILITIES

• Supports vendor management as needed.
• Participates in regulatory and safety reviews.
• May perform product penetration testing activities.
• May perform product security incident response activities.
• May perform product security vulnerability management activities.
• May be required to travel to other company locations on occasion.

 

MINIMUM QUALIFICATION REQUIREMENTS

 

Education

Bachelor’s degree in Computer Science or, equivalent of education and experience sufficient to successfully perform the essential functions of the job may be considered.

 

Experience

Minimum 5 years experience

• Experience conducting product and/or cyber security practices in a regulated industry or environment; knowledge of global standards and frameworks (ISO, NIST, FDA, ITIL, EUMDR, etc.) strongly preferred.
• Professional certification in cyber security practices (CISSP, CEH, or similar) preferred.

 

Skills

• Working knowledge of modern software development practices, including Scrum Agil