Senior Cybersecurity Software Engineer - Medical Devices

F. Hoffmann-La Roche AG; Tucson (AZ); On-site; USD 104,000 - 193,000; Full time

Job summary

Roche Tissue Diagnostics is seeking a Senior Software Engineer in Cybersecurity to lead secure software development initiatives. You will guide product development teams on secure patterns, perform risk assessments, and drive security improvements across the product portfolio.

The role requires advanced degree with relevant experience, and may involve cloud security, regulatory knowledge, and collaboration with the PSPO. Excellent communication and leadership are essential.

Qualifications

• BS degree with at least 8 years of related experience; MS with 4 years; or PhD with 2 years.
• Prior experience in secure software development is required.
• Cybersecurity certifications (e.g., CISA, CISM, CISSP) are desirable.
• Experience with cloud security concepts and medical devices (IVD) is preferred.
• Knowledge of Windows and .NET tech stack; Java and Linux are a plus.
• Familiarity with cybersecurity regulations, laws and standards for medical devices.

Responsibilities

• Contribute as SME to cybersecurity risk assessments for RTD products, identifying and mitigating risks.
• Consult development teams on vulnerability exposure and impacts.
• Share secure design patterns and security technology usage with teams.
• Create and review security concepts, designs, and lifecycle security plans.
• Oversee penetration tests with internal teams and external providers.
• Assess and track mitigation strategies and outcomes.
• Coordinate with PSPO to disseminate best practices and process updates.
• Present product security posture results to diverse internal audiences.

Skills

Secure SDLC

Threat modeling

Vulnerability assessment

Compliance knowledge

Cloud security

Education

BS degree

MS degree

PhD degree

Tools

Windows

.NET

Linux

Cloud platforms

Job description

Roche Tissue Diagnostics is seeking a Senior Software Engineer in Cybersecurity to lead secure software development initiatives. You will guide product development teams on secure patterns, perform risk assessments, and drive security improvements across the product portfolio.

The role requires advanced degree with relevant experience, and may involve cloud security, regulatory knowledge, and collaboration with the PSPO. Excellent communication and leadership are essential.