Analyst - Product Security

Fresenius Medical Care; Bengaluru; On-site; INR 800,000 - 1,200,000; Full time

Job summary

Fresenius Medical Care in Bengaluru is seeking a dedicated Product Security Specialist to support cybersecurity requirements across design, development, change management and maintenance of our medical devices and connected platforms.

You will perform threat modeling, vulnerability assessments and risk evaluations, implement security controls, monitor post-market cybersecurity activities, and collaborate with Engineering, Quality and Regulatory teams to ensure compliance and continuous

Responsibilities

• Support the integration of cybersecurity requirements into product design, development, change management and maintenance for assigned products and platforms.
• Perform product-focused security analysis, including threat modeling, vulnerability assessments and cybersecurity risk evaluations for software, hardware, APIs and connected systems.
• Assist in implementing, validating and monitoring technical security controls aligned with secure development and product security requirements.
• Support post-market cybersecurity activities including vulnerability monitoring, incident analysis, remediation coordination and issue tracking.

Job description

• Support the integration of cybersecurity requirements into the design, development, change management, and maintenance activities of assigned products and platforms.
• Perform product-focused security analysis, including threat modeling, vulnerability assessments, and cybersecurity risk evaluations for software, hardware, APIs, and connected systems.
• Support the implementation, validation, and monitoring of technical security controls in alignment with secure development and product security requirements.
• Assess product changes, newly identified vulnerabilities, software updates, and deviations from a product-specific cybersecurity perspective, and support remediation activities where required.
• Utilize established procedures and security workflows to perform routine product security activities, including tracking findings, maintaining records, and supporting compliance and health monitoring processes for assigned products.
• Maintain up-to-date knowledge of emerging cybersecurity threats, security technologies, software and hardware vulnerabilities, secure engineering practices, and evolving threat vectors relevant to product security.
• Assist in the development and enhancement of security automation use cases, scripts, and tooling to improve the efficiency and effectiveness of product security assessments and monitoring activities.
• Maintain and support product-level cybersecurity documentation, including risk assessments, threat models, security requirements, test evidence, and regulatory or audit-related records for assigned products.
• Support post-market cybersecurity activities for assigned products, including vulnerability monitoring, incident analysis, remediation coordination, and cybersecurity issue tracking where product expertise is required.
• Participate in cross-functional security and product initiatives, collaborating with Engineering, Quality, Regulatory, DevOps, and other stakeholders to address cybersecurity requirements and risks.
• Act as a technical point of contact for cybersecurity-related activities within assigned product teams, supporting issue resolution, security reviews, and ongoing compliance efforts.
• Ensure compliance with the Code of Business Conduct, organizational cybersecurity policies, secure development standards, and all applicable local, state, federal, and industry regulations.
• Participate in recurring operational, project, and governance meetings to support effective coordination, knowledge sharing, issue tracking, and continuity of product cybersecurity activities.