{"id":3728940,"url":"https://alion.io/job/terumo-bct-tg-it-application-security-manager","title":"TG IT Application Security Manager","company":{"id":1777033,"name":"Terumo BCT","domain":"terumobct.com","url":"https://alion.io/company/terumobct","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Leadership","role_family":"Leadership","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Lakewood, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":121400,"max":151800,"currency":"USD","period":"year","gross":null,"usd_annual":151800},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"GCP","optional":false},{"name":"HIPAA","optional":false},{"name":"NIST CSF","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP ASVS","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"PCI DSS","optional":false},{"name":"SOC 2","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-10-15T07:00:00Z","employer_posted_date":"2026-10-15","last_verified_at":"2026-11-08T20:20:06Z","board_verified":true,"closed_at":null,"days_open":24,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":24},"description":"Requisition ID: 35487\nAt Terumo Blood and Cell Technologies, our 8,000+ global associates proud to come to work each day, knowing that what we do impacts the lives of patients around the world. For Terumo, for Everyone, Everywhere.\nWe make medical devices and related products that are used to collect, separate, manufacture and process various components of blood and cells. With our innovative technologies and service offerings, we touch a patient’s life every second of every day and are committed to continuing to increase the number of patients we serve. Advancing healthcare with heart.\nWith some of the best and brightest minds in the industry, an unmatched global footprint, comprehensive benefits and a distinct culture, Terumo Blood and Cell Technologies is a great place to work, grow and be part of a team that is focused on making a difference. Join us and help shape wherever we go next. You create your future and ours.\nApplication Security Manager\nJOB SUMMARY\nEnterprise Application Portfolio - The Application Security Manager is responsible for leading the organization's Application Security program, ensuring that security is integrated throughout the Application Cycle (SDLC). This role partners closely with the software teams, cloud, architecture, infrastructure, and potentially product teams to identify, assess, and mitigate application security risks while enabling secure software delivery.\nThe successful candidate will lead a team of application security analysts, establish secure development standards, oversee security testing programs, and drive adoption of security best practices aligned with industry standards such as NIST SP 800-218 (Secure Software Development Framework), NIST Cybersecurity Framework (CSF) 2.0, OWASP, and CIS Controls.\nEmployment Type: Full-time\nDepartment: Global Cybersecurity\nRole Reports to: Security Operations Leader\nLocation: Americas\nWork Arrangement: Hybrid\nScope: Regional\nESSENTIAL DUTIES (or key responsibilities)\nApplication Security Leadership\nCollaborate with other global and regional leaders within to develop the enterprise Application Security strategy.\nLead, mentor, and develop Application Security Analysts.\nDefine AppSec metrics, KPIs, and maturity goals in collaboration with regional and global security leaders.\nSecure Software Lifecycle\nIntegrate security into all phases of the enterprise application portfolio.\nEnsure security requirements are incorporated during design and architecture reviews.\nPromote security-by-design principles across application teams.\nSecurity Testing\nManage and oversee:\nStatic Application Security Testing (SAST)\nDynamic Application Security Testing (DAST)\nSoftware Composition Analysis (SCA)\nInteractive Application Security Testing (IAST)\nAPI Security Testing\nContainer Security\nInfrastructure as Code (IaC) Security\nMobile Application Security Testing\nSecrets Detection\nReview findings, prioritize remediation, and validate fixes.\nAssist in Supply Chain Security\nThreat Modeling\nFacilitate threat modeling sessions with development teams.\nIdentify abuse cases and attack paths.\nRecommend architectural improvements.\nEnsure high-risk applications undergo formal security architecture reviews.\nVulnerability Management\nEstablish application vulnerability management processes\nPrioritize remediation using risk-based methodologies\nTrack remediation SLAs\nReport vulnerability metrics to executive leadership\nCoordinate penetration testing remediation activities\nThreat Intelligence\nCloud Application Security\nSupport secure development within cloud platforms including:\nAWS\nMicrosoft Azure\nGoogle Cloud Platform\nSecure Code Reviews\nConduct manual secure code reviews\nReview high-risk applications\nProvide secure coding guidance\nCoach development teams on remediation\nAPI Security\nEstablish and set-up safe rules\nFind weak spots through testing\nMonitor logs to spot shadow APIs and strange traffic patterns\nSecurity Awareness\nCollaboration on training programs covering:\nOWASP Top 10\nSecure Coding\nAPI Security\nCloud Security\nCommon software vulnerabilities\nSecure design principles\nApplication Risk Management\nPerform application security risk assessments.\nSupport enterprise application risk management initiatives.\nIncident Response\nSupport cyber incident response by:\nInvestigating application security incidents.\nSupporting forensic analysis.\nIdentifying root causes.\nLeading post-incident reviews.\nDeveloping preventive controls.\nCompliance\nSupport compliance initiatives including:\nNIST CSF 2.0\nNIST SP 800-218 (SSDF)\nNIST SP 800-53\nOWASP ASVS\nPCI DSS\nHIPAA\nSOX\nISO/IEC 27001\nSOC 2\nOTHER DUTIES AND RESPONSIBILITIES\nMINIMUM QUALIFICATION REQUIREMENTS\nEducation\nBachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field.\nMaster's degree preferred.\nExperience\n8-10+ years of cybersecurity experience.\n5+ years in Application Security.\n3+ years leading security teams.\nExperience implementing enterprise DevSecOps programs.\nExperience working with Agile and CI/CD environments.\nExperience with cloud-native application security.\n-Or-\nAn equivalent competency level acquired through a variation of these qualifications may be considered.\nCertificates, Licenses, Registrations\nCISSP\nCSSLP\nGIAC Web Application Penetration Tester (GWAPT)\nGIAC Secure Software Programmer (GSSP)\nCertified Cloud Security Professional (CCSP)\nCertified Information Security Manager (CISM)\nMicrosoft Certified: Cybersecurity Architect Expert\nMicrosoft Certified: Azure Security Engineer Associate\nKorn Ferry Competencies\nLeadership Competencies\nStrong people leadership\nStrategic planning\nExecutive communication\nStakeholder management\nCross-functional collaboration\nRisk-based decision making\nProgram management\nCoaching and mentoring\nConflict resolution\nContinuous improvement mindset\nKey Performance Indicators (KPIs)\nCritical vulnerability remediation SLA compliance\nMean time to remediate (MTTR)\nPercentage of applications covered by SAST, DAST, and SCA\nSecurity defects identified pre-production\nReduction in high-risk application vulnerabilities\nCI/CD pipeline security coverage\nSecure code review completion rate\nThreat model completion rate\nDeveloper secure coding training completion\nPenetration test remediation completion\nApplication security maturity score\nAudit and compliance findings related to application security\nPHYSICAL REQUIREMENTS (for US only)\nTypical Office Environment requirements include: reading, speaking, hearing, close vision, traverse, bending, sitting, and occasional lifting up to 20 pounds.\nTarget Pay Range: $121,400.00 to $151,800.00 - Salary to be determined by the education, experience, knowledge, skills, and abilities of the applicant, internal equity, and alignment with market data\nTarget Bonus on Base: 15.0\nWe anticipate this requisition will be open for a minimum of five days, from 09/16/2026. We encourage your prompt application.\nAt Terumo Blood and Cell Technologies, we provide competitive total reward offerings that consist of compensation, benefits, recognition, along with a wealth of other well-being, work-life and recognition programs which support in unlocking the potential for you and your family. Included in our expansive list of benefits offerings are multiple group medical, dental and vision plans, a robust wellness program, life insurance and disability coverages, also a variety of voluntary programs such as group accident, hospital indemnity, critical illness, pet insurance and much more. To help you save for retirement, we offer a 401(k) plan with a matching contribution and for work-life balance we have vacation and sick time programs for associates. For us, it’s about protecting the personal welfare of our associates and their families, helping to achieve personal goals and offering those extra touches for convenience, security and overall peace of mind.\nWe are proud to be an Equal Opportunity Affirmative Action Employer. All applicants will be afforded equal opportunity without discrimination because of race, color, religion, sex, gender identity or expression, sexual orientation, marital status, order of protection status, national origin or ancestry, citizenship status, age, physical or mental disability unrelated to ability, military status or an unfavorable discharge from military service.","description_format":"text","description_chars":8318,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":3,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":["Equity","Life insurance","Retirement plans"],"hiring_locations":[{"name":"United States","iso":"US","kind":"region"},{"name":"Argentina","iso":"AR","kind":"region"},{"name":"Brazil","iso":"BR","kind":"region"},{"name":"Canada","iso":"CA","kind":"region"},{"name":"Colombia","iso":"CO","kind":"region"},{"name":"Mexico","iso":"MX","kind":"region"},{"name":"Anguilla","iso":"AI","kind":"region"},{"name":"Antigua and Barbuda","iso":"AG","kind":"region"},{"name":"Aruba","iso":"AW","kind":"region"},{"name":"Bahamas","iso":"BS","kind":"region"},{"name":"Barbados","iso":"BB","kind":"region"},{"name":"Belize","iso":"BZ","kind":"region"},{"name":"Bermuda","iso":"BM","kind":"region"},{"name":"Bolivia","iso":"BO","kind":"region"},{"name":"British Virgin Islands","iso":"VG","kind":"region"},{"name":"Bonaire, Sint Eustatius and Saba","iso":"BQ","kind":"region"},{"name":"Cayman Islands","iso":"KY","kind":"region"},{"name":"Chile","iso":"CL","kind":"region"},{"name":"Costa Rica","iso":"CR","kind":"region"},{"name":"Curaçao","iso":"CW","kind":"region"},{"name":"Dominica","iso":"DM","kind":"region"},{"name":"Dominican Republic","iso":"DO","kind":"region"},{"name":"Ecuador","iso":"EC","kind":"region"},{"name":"El Salvador","iso":"SV","kind":"region"},{"name":"Falkland Islands","iso":"FK","kind":"region"},{"name":"French Guiana","iso":"GF","kind":"region"},{"name":"Greenland","iso":"GL","kind":"region"},{"name":"Grenada","iso":"GD","kind":"region"},{"name":"Guadeloupe","iso":"GP","kind":"region"},{"name":"Guatemala","iso":"GT","kind":"region"},{"name":"Guyana","iso":"GY","kind":"region"},{"name":"Haiti","iso":"HT","kind":"region"},{"name":"Honduras","iso":"HN","kind":"region"},{"name":"Jamaica","iso":"JM","kind":"region"},{"name":"Martinique","iso":"MQ","kind":"region"},{"name":"Montserrat","iso":"MS","kind":"region"},{"name":"Nicaragua","iso":"NI","kind":"region"},{"name":"Panama","iso":"PA","kind":"region"},{"name":"Paraguay","iso":"PY","kind":"region"},{"name":"Peru","iso":"PE","kind":"region"},{"name":"Puerto Rico","iso":"PR","kind":"region"},{"name":"Saint Kitts and Nevis","iso":"KN","kind":"region"},{"name":"Saint Lucia","iso":"LC","kind":"region"},{"name":"Saint Vincent and the Grenadines","iso":"VC","kind":"region"},{"name":"Saint-Pierre and Miquelon","iso":"PM","kind":"region"},{"name":"Sint Maarten","iso":"SX","kind":"region"},{"name":"Suriname","iso":"SR","kind":"region"},{"name":"Trinidad and Tobago","iso":"TT","kind":"region"},{"name":"Turks and Caicos Islands","iso":"TC","kind":"region"},{"name":"Uruguay","iso":"UY","kind":"region"},{"name":"United States Virgin Islands","iso":"VI","kind":"region"},{"name":"Venezuela","iso":"VE","kind":"region"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Cell & Gene Therapy","Medical Supplies & Consumables"],"lifecycle":[{"event":"open","at":"2026-11-04T06:57:19Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 12 · green card filings: 3","filings_12m":12,"filings_prev_12m":9,"green_card_filings_12m":3,"median_offered_wage_usd":134500,"route":null,"cap_exempt":false,"checked_at":"2026-11-08T10:45:15+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":64,"band":"ok","label":"Likely open","p_open":1,"p_active":0.854,"p_room":0.75,"age_days":23,"expected_fill_days":28,"reasons":["conf:5","velocity","win:late"],"computed_at":"2026-11-08T05:47:12Z"},"pay":{"stated_usd_annual":151800,"is_top_pay":true},"html_url":"https://alion.io/job/terumo-bct-tg-it-application-security-manager","json_url":"https://alion.io/job/terumo-bct-tg-it-application-security-manager.json","meta":{"generated_at":"2026-11-08T23:41:22Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":49210,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-09T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1777033},"rest":"https://alion.io/mcp/rest/get_company?id=1777033"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fterumo-bct-tg-it-application-security-manager"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fterumo-bct-tg-it-application-security-manager"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fterumo-bct-tg-it-application-security-manager"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/terumo-bct-tg-it-application-security-manager\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fterumo-bct-tg-it-application-security-manager"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3728940}},{"tool":"search_jobs","arguments":{"company":"terumobct.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3728940},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}