Senior Principal Cybersecurity Engineer Healthcare Privacy

F. Hoffmann-La Roche AG; Risch-Rotkreuz; On-site; CHF 210,000 - 280,000; Full time

Job summary

Roche is seeking an experienced security leader to define robust security and privacy baselines for Roche medical devices and cloud/on‑premises products across the Software Development Lifecycle (SDLC). You will collaborate with product teams to embed privacy controls and safeguard patient safety.

You will drive risk management, threat modeling, vulnerability management, and testing remediation, while coordinating external validations and incident response with Roche Intelligence and Defense

Qualifications

• Bachelor’s degree in Engineering, Computer Science, or related discipline.
• 12+ years of relevant experience in security engineering, security operations, vulnerability management, or application security (BS); or MS with 8+ years; or PhD with 4+ years.
• Experience working with product software development and cloud platforms in regulated healthcare environments.

Responsibilities

• Define robust security and privacy baselines for Roche medical devices, health/clinical solutions, and cloud or on‑premises products across the entire SDLC.
• Champion risk management framework development and implementation, integrating technology changes, customer needs, and global regulations.
• Lead threat modeling and cybersecurity risk assessments to safeguard patient safety and business continuity.
• Drive proactive vulnerability management across technology layers with remediation alignment.
• Assess and mitigate testing outcomes from SAST, DAST, SCA, IaC, and pentesting and guide remediation with engineering teams.
• Coordinate external security validations and incident response with Roche Intelligence and Defense teams.
• Maintain regulatory compliance documentation, playbooks, and audit-ready tools.
• Escalate and steer strategic security capabilities to executive risk committees and cross‑functional initiatives.

Skills

Threat modeling

Security engineering

Vulnerability management

Regulatory & privacy controls

Cloud security

Communication & leadership

Education

Bachelor’s degree in Engineering, Computer Science, or related discipline

MS or PhD preferred

Job description

Roche is seeking an experienced security leader to define robust security and privacy baselines for Roche medical devices and cloud/on‑premises products across the Software Development Lifecycle (SDLC). You will collaborate with product teams to embed privacy controls and safeguard patient safety.

You will drive risk management, threat modeling, vulnerability management, and testing remediation, while coordinating external validations and incident response with Roche Intelligence and Defense