Terumo · 8 hours ago
Product Security Engineer II
Lakewood, CO
Full-time
Onsite
Senior Level
$136K/yr - $170K/yr
5+ years expTerumo Blood and Cell Technologies is dedicated to advancing healthcare through innovative medical technology. The Product Security Engineer II role focuses on integrating cybersecurity throughout the product lifecycle, partnering with various teams to ensure products are secure and compliant.
Health CareManufacturingMedicalMedical DeviceTraining
Responsibilities
Define, maintain, and evolve objective, testable, technology-agnostic product security requirements, ensuring traceability to product security needs, risks, and regulatory expectations
Analyze complex technical issues, document findings, and partner with engineering and product teams to drive implementation of risk-based, secure-by-design solutions
Lead the development and ongoing maintenance of Product Security Plans, Threat Models, Product Security Reports, and related lifecycle deliverables, ensuring accuracy and alignment throughout the product lifecycle
Guide engineering teams in vulnerability identification and analysis, assess post-market risk, and lead post-market activities, including threat intelligence integration, vulnerability management, coordinated disclosure, patch planning, and product incident response
Lead assessment of third-party components and suppliers, oversee SBOM creation and maintenance, monitor component lifecycle risk, and proactively identify vulnerabilities or end-of-support concerns
Lead contributions to customer-facing and regulatory documentation, including labeling content and cybersecurity documentation for submissions, clearly communicating complex technical findings verbally and in writing
Drive updates and continuous improvement of product security procedures, work instructions, and technical guidance documents, ensuring alignment with evolving regulatory and industry standards
Provide technical leadership and mentorship to engineering teams, and collaborate closely with R&D architects, Quality, Safety, and Regulatory partners to ensure a cohesive and consistent security posture across the product portfolio
Develop, maintain, and enhance the product security test lab environment
Actively participate in and influence regulatory, safety, and design reviews
Conduct penetration testing directly or manage and oversee third-party penetration testing vendors, including scoping, execution, and review of findings
Play a key role in product incident response activities
Represent Product Security in customer, auditor, and regulatory discussions as a subject matter expert
Qualification
Required
Bachelor's degree in computer science or equivalent education and experience sufficient to perform the essential functions of the job
Minimum 5+ years of relevant experience
Demonstrated experience conducting product and/or cybersecurity practices in a regulated industry or environment
Strong working knowledge of global standards and frameworks (ISO 81001-5-1, AAMI TIR57/TIR97, NIST CSF, FDA pre-/post-market guidance)
Professional cybersecurity certification (e.g., CISSP, CEH, or similar) strongly preferred
Preferred
Experience with PKI and certificate management for medical devices, including provisioning, rotation, secure storage, and certificate-based authentication
Familiarity with Azure Cloud Services, including identity and access management, secure architecture patterns, and application/service hardening in cloud-hosted environments
Hands-on experience supporting or maintaining a Product Security Lab environment
Practical experience with embedded device security, secure boot, cryptographic services, firmware integrity, or hardware security features
Understanding of medical device cybersecurity standards such as FDA Premarket Guidance, post market expectations, IMDRF, AAMI TIR57/TIR97, ISO/IEC 81001-5-1, and SBOM-related standards (SPDX, CycloneDX)
Familiarity with DevOps or DevSecOps pipelines, including CI/CD security tooling and automation
Experience developing or maintaining secure communication protocols (TLS, mutual authentication, key exchange mechanisms)
Experience using risk analysis and mitigation methodologies
Quality and continuous improvement mindset
Demonstrated ability to communicate effectively both verbally and in writing
Benefits
Multiple group medical, dental and vision plans
A robust wellness program
Life insurance and disability coverages
A variety of voluntary programs such as group accident, hospital indemnity, critical illness, pet insurance and much more
401(k) plan with a matching contribution
Vacation and sick time programs for associates
Company
Terumo
Terumo develops technology and medical devices for hollow fiber technology, blood management systems, and endovascular therapy.
10001+ employees
Funding
Current Stage
Late StageTotal Funding
$22.95M2016-06-22Grant· $17.4M
2010-12-16Series Unknown· $2.14M
2010-02-26Series Unknown· $3.41M
Recent News
Medical Device Network
2026-01-07
2025-12-10
Company data provided by crunchbase