Senior Cybersecurity Engineer - Medical Device Software Leader

Roche; Tucson (AZ); On-site; USD 116,000 - 193,000; Full time

Job summary

Roche Tissue Diagnostics is seeking a Senior Software Engineer in Cybersecurity to guide secure design and risk assessment across the RTD product portfolio. You will lead department-level cybersecurity uplift initiatives and engage with the Product Security & Privacy Organization to advance secure development practices.

You will analyze vulnerabilities, craft secure design patterns, and oversee penetration tests with internal teams and providers.

Qualifications

• BS degree and at least 8 years of related experience or equivalent.
• MS degree in a related discipline with 4 years of experience or PhD with 2 years of experience.
• Experience in secure software development; cybersecurity certifications are a plus.

Responsibilities

• Contribute as SME to cybersecurity risk assessments for the RTD portfolio.
• Consult development teams on vulnerability impacts and exposure.
• Contribute knowledge on secure design patterns and security technologies.
• Create and review security concept docs and plans throughout the product lifecycle.
• Manage and oversee penetration tests with internal and external teams; track mitigations.
• Collaborate with Roche PSPO to disseminate best practices and process updates.
• Deliver presentations on product security posture to diverse internal audiences.

Skills

Secure software development

Cybersecurity risk assessments

Cloud security concepts

Documentation & presentations

Penetration testing management

Product security collaboration

Education

BS degree

MS degree

PhD degree

Tools

Windows

.NET

Java

Linux

Job description

Roche Tissue Diagnostics is seeking a Senior Software Engineer in Cybersecurity to guide secure design and risk assessment across the RTD product portfolio. You will lead department-level cybersecurity uplift initiatives and engage with the Product Security & Privacy Organization to advance secure development practices.

You will analyze vulnerabilities, craft secure design patterns, and oversee penetration tests with internal teams and providers.