Product Security Engineer

Requisition

At Terumo Blood and Cell Technologies, our 8,000+ global associates proud to come to work each day, knowing that what we do impacts the lives of patients around the world.
For Terumo, for Everyone, Everywhere.

We make medical devices and related products that are used to collect, separate, manufacture and process various components of blood and cells. With our innovative technologies and service offerings, we touch a patient's life every second of every day and are committed to continuing to increase the number of patients we serve.
Advancing healthcare with heart.

With some of the best and brightest minds in the industry, an unmatched global footprint, comprehensive benefits and a distinct culture, Terumo Blood and Cell Technologies is a great place to work, grow and be part of a team that is focused on making a difference.
Join us and help shape wherever we go next. You create your future and ours.

Terumo Blood and Cell Technologies (TBCT) designs, engineers, and builds medical technology that helps save lives. TBCT integrates cybersecurity throughout the total product lifecycle to ensure our products are safe, secure, and effective.

The Product Security Engineer partners with R&D, Quality, Regulatory, and other cross‑functional stakeholders to define, implement, and support cybersecurity activities from initial concept through decommissioning. This role drives secure‑by‑design practices, facilitates product security risk management, and ensures compliance with TBCT's Product Security Lifecycle Procedure and all associated procedures and work instructions.

• Define and maintain objective, testable, technology‑agnostic product security requirements, ensuring traceability to product security needs, risks, and regulatory expectations.
• Analyze technical issues, document findings, and collaborate with engineering and product teams to support implementation of risk‑based, secure‑by‑design solutions.
• Support the development and maintenance of Product Security Plans, Threat Models, Product Security Reports, and related lifecycle deliverables, ensuring they remain accurate and updated throughout the product lifecycle.
• Assist engineering teams with vulnerability identification and analysis, support post‑market risk assessment, and contribute to post‑market activities, including vulnerability management, threat intelligence intake, and patch planning.
• Assess third‑party components and suppliers, support SBOM creation and maintenance, monitor component lifecycle risk, and help identify vulnerabilities or end‑of‑support concerns.
• Contribute to customer‑facing and regulatory documentation, including labeling content and cybersecurity documentation for submissions, and communicate technical findings verbally and in writing.
• Maintain and support updates to product security procedures, work instructions, and technical guidance documents, contributing to continuous improvement and alignment with evolving standards.
• Provide technical input and guidance to engineering teams, and collaborate with R&D, Quality, Safety, and Regulatory partners to support a cohesive product security posture.

• Support development and maintenance of the product security test lab environment.
• Participate in regulatory, safety, and design reviews.
• May conduct penetration testing activities under guidance or support third‑party penetration testing efforts.
• May participate in product incident response activities.
• May support Product Security representation in customer, auditor, or regulatory discussions.

• Experience with PKI and certificate management for medical devices, including provisioning, rotation, secure storage, and certificate‑based authentication.
• Familiarity with Azure Cloud Services, including identity and access management, secure architecture patterns, and application/service hardening in cloud‑hosted environments.
• Hands‑on experience supporting or maintaining a Product Security Lab environment.
• Practical experience with embedded device security, secure boot, cryptographic services, firmware integrity,…