CybersecurityEngineer

Quantum Technologies LLC; Austin (TX); On-site; USD 120,000 - 160,000; Full time

Job summary

Quantum Technologies. LLC in Austin, TX seeks a Subject Matter Expert in cybersecurity risk assessments for the RTD product portfolio.

You will lead risk analyses, verify mitigations, and guide secure design decisions across development teams. The role requires advanced degrees or equivalent, cloud security expertise, and experience with medical devices; you will orchestrate penetration tests and present security posture to large internal audiences.

Qualifications

• BS degree with at least 8 years related experience; MS with 4+ years; PhD with 2+ years.
• Secure software development experience.
• Cybersecurity certifications desired (e.g. CISA, CISM, CISSP).
• Experience in Cloud security concepts and with medical devices, especially IVD systems.
• Knowledge about Windows and .Net technology stack (Java and Linux are a plus).
• Knowledge of cybersecurity regulations, laws and standards for the medical device industry.

Responsibilities

• Contribute as a Subject Matter Expert to cybersecurity risk assessments for the RTD product portfolio, including risk identification, risk analysis and verification of risk mitigations.
• Consult development teams in analyzing potential impacts and exposure of vulnerabilities.
• Contribute technical knowledge to development teams about secure design patterns and the right use of security technologies.
• Create and review documentation of security concepts, secure designs and plans to maintain the secure state of the product portfolio throughout its lifecycle.
• Manage and oversee penetration tests with internal product teams and external service providers. Assess and track mitigation strategies.
• Collaborate with Roche’s Product Security and Privacy Operations group to disseminate process updates and state of the art best practices to product development teams.
• Prepare and deliver presentations of product security posture results to large and diverse internal audiences.

Skills

Secure software development

Cloud security

Cybersecurity certifications

Windows & .NET

Regulatory knowledge (medical devices)

Planning & organization

Education

Bachelor's degree + 8 years related experience

MS degree + 4 years related experience

PhD degree + 2 years related experience

Tools

Windows

.NET

Java

Linux

Job description

US Citizen, Green Card, H-1B, OPT-EAD, CPT, Other

Work Authorization: US Citizen, Green Card, OPT-EAD, CPT, H-1B, H4-EAD, Other

Job Description:

• Contribute as a Subject Matter Expert to cybersecurity risk assessments for the RTD product portfolio, including risk identification, risk analysis and verification of risk mitigations.
• Consult development teams in analyzing potential impacts and exposure of vulnerabilities.
• Contribute technical knowledge to development teams about secure design patterns and the right use of security technologies.
• Create and review documentation of security concepts, secure designs and plans to maintain the secure state of the product portfolio throughout its lifecycle.
• Manage and oversee penetration tests with internal product teams and external service providers. Assess and track mitigation strategies.
• Collaborate with Roche’s Product Security and Privacy Operations group to disseminate process updates and state of the art best practices to product development teams.
• Prepare and deliver presentations of product security posture results to large and diverse internal audiences.

Primary Skill Set (or) Required Skills:

• BS degree and least 8 years of related experience or equivalent in a directly related discipline or equivalent combination of education and experience. MS degree in directly related discipline + 4 years of related experience required; OR, PhD degree in a directly related discipline + 2 years of related experience required.
• Prior experience in secure software development. Cybersecurity certification(s) desired, but not required (e.g. CISA, CISM, CISSP).
• Experience in Cloud security concepts and with medical devices, especially IVD systems, desired.
• Knowledge about Windows and .Net technology stack (Java and Linux are a plus).
• Knowledge of cybersecurity regulations, laws and standards for the medical device industry.
• Driven, self-starter with good planning and organizational skills and a strong attention to detail.

We are an equal opportunity employer. All aspects of employment including the decision to hire, promote, discipline, or discharge, will be based on merit, competence, performance, and business needs. We do not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, national origin, citizenship/ immigration status, veteran status, or any other status protected under federal, state, or local law.