Principal SDET, Cybersecurity Test Engineer

Terumo BCT, Inc.; Lakewood (CO); On-site; USD 144,000 - 180,000; Full time

Benefits offered by this job

401(k) plan with matching contribution

Comprehensive medical, dental, and vision plans

Robust wellness program

Job summary

Terumo BCT, Inc. is seeking a Principal SDET - Cybersecurity Test Engineer in Lakewood, CO. This senior position focuses on developing and implementing cybersecurity testing strategies, collaborating with teams to ensure compliance with medical device regulations.

The ideal candidate will have over 8 years of experience in SDET roles, deep expertise in cybersecurity principles, and a strong foundation in programming languages like C#, C++, and Python. The position offers a competitive salary and a hybrid work schedule.

Qualifications

• Minimum 8 years experience in an SDET role.
• At least 5 years experience in Cybersecurity Testing.
• Strong foundation in software design principles.

Responsibilities

• Define cybersecurity testing strategy aligned with regulatory requirements.
• Mentor engineers on cybersecurity testing practices.
• Run risk and vulnerability assessments on products.
• Oversee design and execution of automated test scripts.

Skills

Cybersecurity principles

Object-oriented programming (OOP)

C#

C++

Python

Automated testing

DevSecOps

Risk assessments

Leadership

Education

Bachelor's degree in Computer Science or Engineering

Tools

DAST tools

Docker

REST APIs

Azure

Git

Job description

Requisition ID: 35084

Principal SDET - Cybersecurity Test Engineer

Job Summary

The Principal SDET - Cybersecurity Test Engineer is a senior technical leader in our medical device organization committed to improving patient outcomes through innovative, life‑saving technology. This role is responsible for developing and driving the cybersecurity testing strategy across the Software Quality Engineering organization while enabling the broader organization to consistently implement and execute a unified cybersecurity testing approach. By establishing scalable practices and strong technical leadership, the Principal SDET ensures long‑term organizational capability and maturity in cybersecurity testing.

A core focus of this role is embedding cybersecurity as a continuous, front‑loaded component of the software development lifecycle to enable early identification and prevention of vulnerabilities and potential security risks, while maintaining compliance with medical device regulatory requirements. The Principal SDET is responsible for evaluating, documenting, managing, and developing cybersecurity tests for TBCT software systems within the R&D organization.

Effective collaboration is essential to success in this role, requiring strong partnerships with Software Architects, Software Development, Software Test, Systems Engineering, DevOps, Product Security, business leadership, and external consultants. This individual ensures comprehensive coverage of cybersecurity requirements that are translated into actionable, testable, and verifiable outcomes across teams, enabling consistent execution of cybersecurity test strategies.

Essential Duties

• Define a standardized cybersecurity testing strategy for the Software Quality Engineering organization that aligns with product architecture, regulatory requirements, and business goals.
• Train and mentor engineers on cybersecurity testing practices, build training materials, and run knowledge transfer sessions so teams can execute independently.
• Build cybersecurity test plans that meet medical device regulatory standards.
• Run risk and vulnerability assessments on new and existing products and put security testing protocols in place to protect sensitive data.
• Oversee the design and execution of automated test scripts and frameworks across all levels of the test pyramid and apply design patterns suited to security testing.
• Lead dynamic application security testing (DAST) and advise the group on the feasibility, implementation, and maintenance of cybersecurity test automation.
• Work with architecture teams to set cybersecurity testing standards and shape software architecture and development practices so vulnerabilities surface earlier.
• Partner with development, cybersecurity, quality assurance, peer engineers, and architects to find vulnerabilities and embed security testing into the product lifecycle.
• Coordinate with external partners and consultants on joint security testing.
• Contribute to multiple codebases within Scrum teams, resolve environment and test automation issues, and review and approve code and test changes.
• Lead discussions about which test level is right for a given piece of functionality, and engage at any test level when the work requires it.
• Keep up with new cybersecurity threats, tools, and practices, and revise testing methods when needed.

Other Duties and Responsibilities

• Provide strategic leadership for the functional group and keep its direction aligned with company policies and business goals.
• Work with regulatory and quality assurance peers to improve processes that meet industry standards and company‑specific benchmarks. Support inspection readiness with clear processes, documentation, and traceability.
• Supervise Software Quality Engineering and testing activities across teams so best practices stay consistent organization wide. Keep tests maintainable, reusable, and scalable so they integrate cleanly across projects.

Minimum Qualification Requirements

Education:

Bachelor's degree in Computer Science, Engineering or equivalent of education and experience sufficient to successfully perform the essential functions of the job may be considered.

Experience:

Minimum 8 years experience in an SDET role; with at least 5 years experience in Cybersecurity Testing.

Skills:

• Strong foundation in computer science fundamentals, including design patterns, data structures, object‑oriented programming (OOP), and software design principles.
• Proficient in object‑oriented and embedded software development using C#, C++, and Python.
• Deep expertise in cybersecurity principles, frameworks, and secure software development practices, particularly for medical devices.
• Skilled in identifying, assessing, and mitigating security vulnerabilities, including performing structured risk assessments.
• Extensive experience designing and implementing automated test frameworks and scripting solutions.
• Proficient in applying cybersecurity testing across all levels, including unit, integration, and system testing.
• Experience in integrating automated testing and security practices into CI/CD pipelines (DevSecOps).
• Hands‑on experience with DAST and other security testing tools, methodologies, and techniques.
• Holds relevant cybersecurity and product security certifications (e.g., CISSP, CSSLP, OSCP).
• Familiar with modern development technologies, including Docker, REST APIs, JSON, and cloud platforms (Azure).
• Skilled in source code management, version control, and collaborative development workflows (e.g., Git‑based environments).
• Proven ability to drive organizational change, align stakeholders, and lead adoption of engineering and security best practices.
• Strong technical leadership and cross‑functional communication skills, with the ability to influence architecture, development, and quality strategies.
• Self‑driven, adaptable, and committed to continuous learning, innovation, and process improvement.

Physical Requirements

Hybrid position reporting to the Lakewood, CO headquarters, a minimum of 3 days a week. Typical Office Environment requirements include reading, speaking, hearing, close vision, walking, bending, sitting, and occasional lifting up to 20 pounds. The physical demands described here are representative of those that must be met by an associate to successfully perform the essential duties of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential duties.

Target Pay Range

Target Pay Range: $144,000.00 to $180,000.00 – Salary to be determined by the education, experience, knowledge, skills, and abilities of the applicant, internal equity, and alignment with market data. Target Bonus on Base: 15.0%

Benefits

We provide competitive total reward offerings that consist of compensation, benefits, recognition, and a variety of well‑being, work‑life and recognition programs that support personal and family goals. Offerings include multiple group medical, dental and vision plans, a robust wellness program, life insurance, disability coverage, voluntary programs such as group accident, hospital indemnity, critical illness, pet insurance, and more. We also offer a 401(k) plan with a matching contribution, vacation, and sick time programs.

Equal Opportunity

We are proud to be an Equal Opportunity Affir­mative Action Employer. All applicants will be afforded equal opportunity without discrimination because of race, color, religion, sex, gender identity or expression, sexual orientation, marital status, order of protection status, national origin or ancestry, citizenship status, age, physical or mental disability unrelated to ability, military status or an unfavorable discharge from military service.

Workplace Safety

Terumo Blood and Cell Technologies is committed to providing a safe, healthy and secure working environment. Our Colorado campus locations are tobacco‑free workplaces, and we maintain a drug‑free workplace and perform pre‑employment substance abuse testing and detailed background verification.