Analyst - Product Security

Analyst - Product Security

Address: Bengaluru, Bengaluru, KA 560066, India

Job ID: R0262514

Location Type: Hybrid

Job Overview

Fresenius Medical Care serves around 292,000 dialysis patients worldwide and provides products in more than 140 countries. We are a vertically integrated medical technology (MedTech) and healthcare service company made up of three operating segments: Care Delivery, Value-Based Care, and Care Enablement. This structure allows us to provide the full spectrum of healthcare services, systems, devices, technologies, products, and pharmaceuticals to deliver high-quality care to people living with kidney disease.

Job Description

• Support the integration of cybersecurity requirements into the design, development, change management, and maintenance activities of assigned products and platforms.
• Perform product-focused security analysis, including threat modeling, vulnerability assessments, and cybersecurity risk evaluations for software, hardware, APIs, and connected systems.
• Support the implementation, validation, and monitoring of technical security controls in alignment with secure development and product security requirements.
• Assess product changes, newly identified vulnerabilities, software updates, and deviations from a product-specific cybersecurity perspective, and support remediation activities where required.
• Utilize established procedures and security workflows to perform routine product security activities, including tracking findings, maintaining records, and supporting compliance and health monitoring processes for assigned products.
• Maintain up-to-date knowledge of emerging cybersecurity threats, security technologies, software and hardware vulnerabilities, secure engineering practices, and evolving threat vectors relevant to product security.
• Assist in the development and enhancement of security automation use cases, scripts, and tooling to improve the efficiency and effectiveness of product security assessments and monitoring activities.
• Maintain and support product-level cybersecurity documentation, including risk assessments, threat models, security requirements, test evidence, and regulatory or audit-related records for assigned products.
• Support post-market cybersecurity activities for assigned products, including vulnerability monitoring, incident analysis, remediation coordination, and cybersecurity issue tracking where product expertise is required.
• Participate in cross-functional security and product initiatives, collaborating with Engineering, Quality, Regulatory, DevOps, and other stakeholders to address cybersecurity requirements and risks.
• Act as a technical point of contact for cybersecurity-related activities within assigned product teams, supporting issue resolution, security reviews, and ongoing compliance efforts.
• Ensure compliance with the Code of Business Conduct, organizational cybersecurity policies, secure development standards, and all applicable local, state, federal, and industry regulations.
• Participate in recurring operational, project, and governance meetings to support effective coordination, knowledge sharing, issue tracking, and continuity of product cybersecurity activities.

Care in every moment.

Connection in every step.

Important notices

Fraud Notice

Fresenius Medical Care is aware of fraudulent communications from individuals or organizations falsely claiming to represent our company. To help protect yourself, please note:

• Fresenius Medical Care will only contact candidates using official company email domains or through Cara, our virtual AI (Artificial Intelligence) assistant at Fresenius Medical Care.

• We do not request payment, fees, gift cards, cryptocurrency, or banking information at any stage of the recruitment process.

• We do not conduct interviews exclusively through messaging apps or social media platforms.

• All legitimate job openings are posted on our official careers website.

If you receive suspicious communication claiming to be from Fresenius Medical Care, do not respond or share personal information. We encourage you to report the activity to your local consumer protection agency, law enforcement authority, or cybercrime reporting center. We have included links for the most common hiring locations for your convenience.

• United States: Federal Bureau of Investigation (IC3) – www.ic3.gov
• Germany: Bundeskriminalamt (BKA) – www.bka.de
• United Kingdom: Action Fraud – www.actionfraud.police.uk
• Poland: CERT Polska – www.cert.pl
• India: National Cyber Crime Portal – www.cybercrime.gov.in
• Mexico: Guardia Nacional – www.gob.mx/gn
• Philippines: Philippine National Police Anti-Cybercrime Group – www.pnp.gov.ph

We are committed to maintaining a safe and transparent recruitment process.

Recruitment Agency

If you are a recruitment agency submitting a resume on behalf of a client: Fresenius Medical Care AG and its affiliates (FME) only accepts candidate submissions from agencies on its approved Preferred Supplier List. All third-party searches and submissions require an existing signed agreement and prior, written approval from Human Resources; all other submissions will be considered unsolicited. Do not forward resumes or candidate information without such authorization to our applicant tracking system, any company email address, and/or any FME employee, including FME Management. FME disclaims any liability for any fees, commissions, or other charges associated with unsolicited submissions.