Product Security Analyst — Medical Devices

TERUMO BCT, INC; Lakewood, Northern (CO, KY); On-site; USD 78,000 - 97,000; Full time

Job summary

Terumo Blood and Cell Technologies in Lakewood, CO is seeking a Product Security Associate Analyst to support security across the product lifecycle. You will help implement cybersecurity capabilities, coordinate testing with external partners, and stay current on industry threats in the healthcare space.

The role requires a Bachelor’s degree or equivalent experience and at least 1 year in cybersecurity; exposure to medical device cybersecurity is a plus.

Qualifications

• Bachelor’s degree or equivalent education/experience.
• Minimum 1 year of related cybersecurity experience preferred.
• Exposure to vulnerability management or medical device cybersecurity is a plus.

Responsibilities

• Supports cybersecurity capabilities deployment and risk mitigation for Terumo products.
• Coordinates security testing activities (SAST/DAST/SCAs) and third-party pentest coordination.
• Maintains product security lab environment and researches cybersecurity topics to stay current.
• Participates in product security incident response under supervision.
• Monitors industry threat intel feeds relevant to healthcare cybersecurity.
• Helps coordinate customer notification during/global cybersecurity threats.
• Contributes to Coordinated Vulnerability Disclosure and CVE handling.
• Assists in preparing MDS2 forms for customer inquiries.
• Collaborates with program lead to support security program initiatives and process improvements.
• Occasionally travels to other company locations as needed.

Skills

Written communication

Verbal communication

Team collaboration

Cybersecurity basics

Education

Bachelor’s degree

Job description

Terumo Blood and Cell Technologies in Lakewood, CO is seeking a Product Security Associate Analyst to support security across the product lifecycle. You will help implement cybersecurity capabilities, coordinate testing with external partners, and stay current on industry threats in the healthcare space.

The role requires a Bachelor’s degree or equivalent experience and at least 1 year in cybersecurity; exposure to medical device cybersecurity is a plus.