Application Security Manager — Lead Secure SDLC & Cloud Apps

Terumo Blood and Cell Technologies; Lakewood (CO); Hybrid; USD 121,000 - 152,000; Full time

Benefits offered by this job

Medical, dental & vision plans

Wellness program

Life insurance

Job summary

Terumo Blood and Cell Technologies is seeking an Application Security Manager to lead the organization?s AppSec program across the application lifecycle. You will collaborate with software, cloud, and product teams to identify and mitigate security risks while enabling secure software delivery.

The role focuses on building secure development standards, running testing programs (SAST/DAST/IAST), threat modeling, and vulnerability management in a hybrid Americas environment.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field.
• Master's degree preferred.
• 8–10+ years of cybersecurity experience.
• 5+ years in Application Security.
• 3+ years leading security teams.
• Experience implementing enterprise DevSecOps programs.
• Experience working with Agile and CI/CD environments.
• Experience with cloud-native application security.

Responsibilities

• Lead the organizations Application Security program across the Application Cycle (SDLC).
• Develop enterprise application security strategy with global and regional leaders.
• Mentor Application Security Analysts and oversee testing programs (SAST/DAST/IAST, SCA).
• Perform threat modeling sessions and risk assessments for high-risk apps.
• Manage vulnerability management processes and remediation prioritization.
• Support cloud security across AWS, Azure, and GCP.

Education

Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field

Master's degree preferred

Job description

Terumo Blood and Cell Technologies is seeking an Application Security Manager to lead the organization?s AppSec program across the application lifecycle. You will collaborate with software, cloud, and product teams to identify and mitigate security risks while enabling secure software delivery.

The role focuses on building secure development standards, running testing programs (SAST/DAST/IAST), threat modeling, and vulnerability management in a hybrid Americas environment.