Senior Software Engineer - Embedded Security

Terumo Blood and Cell Technologies; Lakewood (CO); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Terumo Blood and Cell Technologies is seeking a Senior Software Engineer - Embedded Security in Lakewood, CO. You will design and deliver cybersecurity-enabled software for safety-critical medical devices, integrating secure boot, secure update, and trusted execution capabilities.

You will collaborate with Product Security and R&D Cybersecurity teams, apply Secure SDLC practices, and lead threat modeling and secure code reviews while shipping embedded software across Linux and VxWorks platforms.

Qualifications

• Bachelor's degree in Computer Science or in an Engineering discipline or equivalent experience.
• Minimum 8 years of hands-on software development in regulated or safety-critical environments.
• Experience implementing cybersecurity controls (authentication, encryption, secure communications, access control).
• Experience shipping embedded software products and working with cross-functional teams.

Responsibilities

• Design and deliver cybersecurity-enabled software for safety-critical medical devices.
• Implement secure boot, secure update, and trusted execution capabilities.
• Collaborate with Product Security and R&D Cybersecurity teams to translate requirements into implementations.
• Develop and maintain automated testing frameworks and software documentation.

Skills

C++

Embedded OS

Security concepts

Threat modeling

Unit testing

Communication

Leadership

Linux

Education

Bachelor's degree in CS or Engineering

Tools

CMake

Yocto

Buildroot

Job description

Senior Software Engineer - Embedded Security

JOB SUMMARY

Senior Embedded Software Engineer responsible for designing and delivering cybersecurity-enabled software capabilities for safety-critical medical devices. Provide functional and empirical analysis related to the design, development, and implementation of software operating systems, including, but not limited to, utility software, development software, and diagnostic software. Participates in the design, implementation, integration, and support of cybersecurity features within embedded software. Works closely with software engineering, systems engineering, product security, and R&D cybersecurity teams to implement secure and resilient products.

ESSENTIAL DUTIES

• Design and implement software solutions that address cybersecurity requirements while balancing product functionality, performance, reliability, and maintainability.
• Implement secure communications, authentication, authorization, certificate management, and cryptographic capabilities within products.
• Own implementation and maintenance of secure boot, secure update, software integrity, and trusted execution capabilities.
• Apply secure software development lifecycle (Secure SDLC) practices throughout design, implementation, verification, and post-market support activities.
• Collaborate with Product Security and R&D Cybersecurity teams to translate cybersecurity requirements into product implementations.
• Investigate, analyze, and remediate software vulnerabilities and cybersecurity findings.
• Contribute technical content to cybersecurity design documentation, evidence packages, and engineering deliverables.
• Lead or contribute to cybersecurity architecture reviews, secure code reviews, secure coding standards and threat modeling activities for assigned product areas.
• Support integration and use of software assurance tools including static analysis, software composition analysis, and vulnerability scanning.
• Support investigation and resolution of software defects, system issues, and cybersecurity findings identified by customers, testing activities, or internal engineering teams.
• Develop and maintain safety-critical, real-time software, including device drivers and networking stacks.
• Coordinate technical activities, provide status updates, and ensure timely delivery of software features. Collaborate with application engineers to define and implement application-embedded software interfaces.
• Collaborate with hardware engineers to define and implement hardware-software interfaces.
• Debug system-level issues using appropriate diagnostic tools and troubleshooting methods.
• Create and maintain automated testing frameworks.
• Develop technical documentation for software architecture and APIs.
• Participate in design reviews and maintain coding standards.
• Troubleshoot and resolve product field issues.
• Monitor system performance metrics and identify opportunities for improvement.

MINIMUM QUALIFICATION REQUIREMENTS

Education

Bachelor’s degree in Computer Science or in an Engineering discipline or, equivalent of education and experience sufficient to successfully perform the essential functions of the job may be considered.

Experience

• Minimum 8 years of hands-on experience developing software in a regulated or safety-critical product environment.
• Hands on experience implementing cybersecurity controls such as authentication, authorization, encryption, secure communications, access control, input validation, and secure data handling.
• Experience identifying and mitigating security vulnerabilities and applying secure software development practices throughout the software development life cycle.
• Demonstrated track record of shipping embedded software products.
• Strong portfolio of implemented components in resource-constrained environments.
• Demonstrated experience collaborating across cross-functional teams to align priorities, resolve issues, and deliver embedded software solutions.

Skills

• Strong knowledge of computer science fundamentals, including design patterns, data structures, object-oriented programming, and software design.
• Strong proficiency in modern C++ and embedded software development principles. Experience developing application-level software for embedded systems.
• Strong understanding of authentication, authorization, cryptography, PKI, certificates, secure communications protocols, and secure software development practices, with demonstrated experience implementing these capabilities in embedded systems.
• Familiarity with IEC 62443, IEC 81001-5-1, FDA cybersecurity guidance, or other secure product development frameworks.
• Background in unit and component testing using modern frameworks, such as Catch and PyTest.
• Skilled in developing technical solutions to complex problems that require analysis, problem solving, and creativity.
• Experience with embedded operating systems, preferably VxWorks and Linux, and tools used to build operating systems and associated applications, such as CMake, Yocto, and/or Buildroot.
• Ability to evaluate, adopt, and leverage emerging AI technologies to improve developer productivity, software quality, and business outcomes.
• Ability to work beyond routine tasks by applying specialized knowledge and technologies.
• Self-motivated and team-oriented, with a positive attitude, vision, growth mindset, and willingness to learn new technologies and approaches.
• Demonstrated ability to communicate effectively, both verbally and in writing.
• Strong collaboration and technical leadership skills, with the ability to influence cross-functional teams, align priorities, and drive issue resolution.

Preferred Qualifications

• Experience implementing TLS, secure communications protocols, certificate management, or cryptographic libraries.
• Experience with secure boot, code signing, firmware integrity validation, or secure software update mechanisms.
• Familiarity with threat modeling methodologies
• CSSLP, Security+, or similar technical cybersecurity credentials.
• Experience implementing AI-assisted developer tools, coding assistants, or workflow automation
• Experience working within regulated product development environments.

-Or-

An equivalent competency level acquired through a variation of these qualifications may be considered.

PHYSICAL REQUIREMENTS

Typical office environment requirements include reading, speaking, hearing, close vision, walking, bending, sitting, and occasional lifting of up to 20 pounds.

The physical demands described here are representative of those that must be met by an associate to successfully perform the essential duties of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential duties.

Additional Physical Requirements

Hybrid position requiring 3 days per week in person at the Lakewood, CO headquarters, with additional in-person days as required to perform the role.