Senior Principal Cybersecurity Architect – Medical Devices

F. Hoffmann-La Roche AG; Rotkreuz; On-site; CHF 180,000 - 240,000; Full time

Job summary

Roche Diagnostics is seeking an experienced security engineer to define security baselines, manage risk, and lead threat modeling across medical devices, cloud solutions, and on-prem systems. You will drive vulnerability management, coordinate incident response, and ensure regulatory compliance through the full SDLC.

The role requires strong collaboration with international teams, up-to-date certifications, and willingness to travel up to 20%.

Qualifications

• Bachelor's degree in Engineering, Computer Science, or related discipline.
• 12+ years of relevant experience in security engineering, security operations, vulnerability management, or application security (BS) or 8+ years with a Master's or 4+ years with a PhD.

Responsibilities

• Define robust security and privacy baselines for medical devices and cloud/on-prem products across the SDLC.
• Champion risk management frameworks for product security lifecycle across technology changes and regulations.
• Lead threat modeling and cybersecurity risk assessments to safeguard patients and continuity.
• Oversee proactive vulnerability management across all technology layers with timely remediation.
• Assess and mitigate testing outcomes (SAST, DAST, SCA, IaC, pen tests) and drive remediation with engineering teams.
• Coordinate validations and incident response with Roche Intelligence and Defense teams.
• Maintain compliance documentation, playbooks, and audit-ready tools.
• Present risk evaluations and mitigation proposals to executive risk committees.

Skills

Threat modeling

Risk management

Cloud platforms

Product security

Stakeholder influence

Education

Bachelor's degree in Engineering or Computer Science

Tools

SAST tools

DAST tools

IaC tooling

Cloud security tools

Job description

Roche Diagnostics is seeking an experienced security engineer to define security baselines, manage risk, and lead threat modeling across medical devices, cloud solutions, and on-prem systems. You will drive vulnerability management, coordinate incident response, and ensure regulatory compliance through the full SDLC.

The role requires strong collaboration with international teams, up-to-date certifications, and willingness to travel up to 20%.