Product Security Associate Analyst

Terumo BCT, Inc. • Lakewood, IL

28d • $77,800 - $97,300 • Onsite

About The Position

Terumo Blood and Cell Technologies designs, engineers, and builds medical technology that helps save lives. Terumo believes in integrating security into all aspects of our product development lifecycle. The Product Security Associate Analyst will work under moderate supervision to provide security support for product lifecycle activities, industry information sharing and coordinated disclosure activities for Terumo Blood and Cell Technologies medical device and software products. This role will participate in a highly collaborative and diverse environment and work closely with partners throughout the company and with the information security professional community of practice, particularly as it relates to medical devices and the healthcare ecosystem.

Requirements

• Bachelor’s degree or equivalent of education and experience sufficient to successfully perform the essential functions of the job may be considered.
• Minimum 1 years of related experience preferred (including internships, co-ops, or academic project work in cybersecurity or software security).
• Exposure to vulnerability management, penetration testing coordination, or medical device cybersecurity is a plus.
• Strong written and verbal communication skills.
• Ability to work collaboratively across teams.
• Foundational understanding of cybersecurity principles and tools

Responsibilities

• Supports the implementation and configuration of cybersecurity capabilities for Terumo Blood and Cell Technologies products, the application of cybersecurity requirements for those products, the implementation of mitigation of cybersecurity defects and risks, and project deliverables such as threat models and project plans.
• Executes product security capabilities such as threat intelligence monitoring, scanning (SAST, DAST, SCA, Network), and coordination of penetration testing with certified third parties.
• Assists in the maintenance of the product security test lab environment and does research and education to keep current on cybersecurity topics.
• Participates in product security incident response activities under guidance of senior team members.
• Monitors industry threat intelligence feeds for cybersecurity issues in the healthcare industry.
• Helps coordinate the customer notification process when global cybersecurity threats are identified.
• Contributes to the Coordinated Vulnerability Disclosure process ensuring closed-loop feedback to security researchers and internal product development stakeholders.
• Assists product teams in the preparation of MDS2 forms to support customer inquiries.
• Collaborates with the product security program leader to support program initiatives and process improvements.
• May be required to travel to other company locations on occasion.

Benefits

• multiple group medical, dental and vision plans
• a robust wellness program
• life insurance and disability coverages
• a variety of voluntary programs such as group accident, hospital indemnity, critical illness, pet insurance
• 401(k) plan with a matching contribution
• vacation and sick time programs

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level