Product Security Associate Analyst

Terumo BCT, Inc.; Lakewood (CO); On-site; USD 78,000 - 97,000; Full time

Benefits offered by this job

Medical, dental, vision plans

Wellness program

Life insurance

Disability coverage

Pet insurance

401(k) with matching

Job summary

Terumo Blood and Cell Technologies is seeking a Product Security Associate Analyst to support product lifecycle cybersecurity, industry information sharing, and coordinated disclosure. You will work under guidance with cross-functional partners and the information security community to strengthen medical device and software product security.

The role involves threat modeling, vulnerability coordination, and assisting in incident response.

Qualifications

• Bachelor’s degree or equivalent of education and experience sufficient to successfully perform the essential functions of the job may be considered.
• Minimum 1 year of related experience preferred (including internships, co‑ops, or academic project work in cybersecurity or software security).
• Exposure to vulnerability management, penetration testing coordination, or medical device cybersecurity is a plus.

Responsibilities

• Supports cybersecurity capabilities implementation, threat modeling, and project deliverables.
• Coordinates scanning (SAST, DAST, SCA, Network) and penetration testing with third parties.
• Maintains security lab environment and stays current on cybersecurity topics.

Skills

Written communication

Team collaboration

Cybersecurity fundamentals

Education

Bachelor’s degree

Job description

Product Security Associate Analyst

JOB SUMMARY

Terumo Blood and Cell Technologies designs, engineers, and builds medical technology that helps save lives. Terumo believes in integrating security into all aspects of our product development lifecycle. The Product Security Associate Analyst will work under moderate supervision to provide security support for product lifecycle activities, industry information sharing and coordinated disclosure activities for Terumo Blood and Cell Technologies medical device and software products. This role will participate in a highly collaborative and diverse environment and work closely with partners throughout the company and with the information security professional community of practice, particularly as it relates to medical devices and the healthcare ecosystem.

ESSENTIAL DUTIES

• Supports the implementation and configuration of cybersecurity capabilities for Terumo Blood and Cell Technologies products, the application of cybersecurity requirements for those products, the implementation of mitigation of cybersecurity defects and risks, and project deliverables such as threat models and project plans.
• Executes product security capabilities such as threat intelligence monitoring, scanning (SAST, DAST, SCA, Network), and coordination of penetration testing with certified third parties,
• Assists in the maintenance of the product security test lab environment and does research and education to keep current on cybersecurity topics.
• Participates in product security incident response activities under guidance of senior team members.
• Monitors industry threat intelligence feeds for cybersecurity issues in the healthcare industry.
• Helps coordinate the customer notification process when global cybersecurity threats are identified.
• Contributes to the Coordinated Vulnerability Disclosure process ensuring closed‑loop feedback to security researchers and internal product development stakeholders.
• Assists product teams in the preparation of MDS2 forms to support customer inquiries.
• Collaborates with the product security program leader to support program initiatives and process improvements.

OTHER DUTIES AND RESPONSIBILITIES

• May be required to travel to other company locations on occasion.

MINIMUM QUALIFICATION REQUIREMENTS

Education

Bachelor's degree or equivalent of education and experience sufficient to successfully perform the essential functions of the job may be considered.

Experience

• Minimum 1 years of related experience preferred (including internships, co‑ops, or academic project work in cybersecurity or software security).
• Exposure to vulnerability management, penetration testing coordination, or medical device cybersecurity is a plus.

Skills

• Strong written and verbal communication skills.
• Ability to work collaboratively across teams.
• Foundational understanding of cybersecurity principles and tools

-Or-

An equivalent competency level acquired through a variation of these qualifications may be considered.

PHYSICAL REQUIREMENTS

Typical Office Environment requirements include reading, speaking, hearing, close vision, walking, bending, sitting, and occasional lifting up to 20 pounds.

The physical demands described here are representative of those that must be met by an associate to successfully perform the essential duties of this job. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential duties.

Target Pay Range:$77,800.00to$97,300.00-Salary to be determined by the education, experience, knowledge, skills, and abilities of the applicant, internal equity, and alignment with market data
Target Bonus on Base:7.0

At Terumo Blood and Cell Technologies, we provide competitive total reward offerings that consist of compensation, benefits, recognition, along with a wealth of other well‑being, work‑life and recognition programs which support in unlocking the potential for you and your family.Included in our expansive list of benefits offerings are multiple group medical, dental and vision plans, a robust wellness program, life insurance and disability coverages, also a variety of voluntary programs such as group accident, hospital indemnity, critical illness, pet insurance and much more.To help you save for retirement, we offer a 401(k) plan with a matching contribution and for work‑life