Software Engineer Senior, Cybersecurity

Motion Recruitment; Oro Valley (AZ); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Motion Recruitment is seeking a Senior Software Engineer focusing on Cybersecurity in Oro Valley, Arizona. The role is a hybrid arrangement for a 12-month engagement with potential extension, collaborating with product teams to guide secure design, risk analysis, and vulnerability assessment across the product portfolio.

You'll lead department-level cybersecurity uplift initiatives, work with the PSPO, and contribute expertise on cloud security and medical device regulatory considerations.

Qualifications

• BS degree with 8+ years of related experience or MS with 4+ years or PhD with 2+ years.
• Experience in secure software development and cybersecurity risk assessments.
• Certifications such as CISA/CISM/CISSP are desired but not required.
• Experience with cloud security and medical devices (IVD) is a plus.
• Knowledge of Windows and the .NET stack; Java and Linux are a plus.
• Strong planning, organization, and attention to detail.

Responsibilities

• Contribute as SME to cybersecurity risk assessments for the RTD product portfolio.
• Consult development teams on vulnerability impacts and exposure.
• Advise on secure design patterns and security technologies.
• Create and review security concepts, designs and lifecycle documentation.
• Oversee penetration tests with internal and external providers.
• Collaborate with PSPO to disseminate best practices to teams.
• Prepare and present security posture results to diverse internal audiences.

Skills

Secure software development

Cloud security

Cybersecurity risk assessments

Penetration testing

Presentation skills

Documentation

Education

BS degree with 8+ years

MS degree with 4+ years

PhD with 2+ years

Tools

Windows

.NET

Java

Linux

Job description

Job Title: Software Engineer Senior, Cybersecurity
Job Location: Oro Valley, Arizona, 85755 (Hybrid)
Job Duration: 12 Months with possible extension

Job Summary:
In this role, you will work directly with software product development teams to provide guidance and oversight on secure design patterns, risk assessments, and vulnerability analysis. Beyond individual projects, you will also lead department-level initiatives for our cybersecurity uplift program and work directly with the Product Security & Privacy Organization (PSPO). If you have a passion for secure software development, experience with medical device regulations or cloud security, and hold an advanced degree with relevant industry experience, we invite you to help us defend and innovate our next-generation technology.

The Opportunity:

• Contribute as a Subject Matter Expert to cybersecurity risk assessments for the RTD product portfolio, including risk identification, risk analysis and verification of risk mitigations.
• Consult development teams in analyzing potential impacts and exposure of vulnerabilities.
• Contribute technical knowledge to development teams about secure design patterns and the right use of security technologies.
• Create and review documentation of security concepts, secure designs and plans to maintain the secure state of the product portfolio throughout its lifecycle.
• Manage and oversee penetration tests with internal product teams and external service providers. Assess and track mitigation strategies.
• Collaborate with Roches Product Security and Privacy Operations group to disseminate process updates and state of the art best practices to product development teams.
• Prepare and deliver presentations of product security posture results to large and diverse internal audiences.

Who You Are:

• BS degree and least 8 years of related experience or equivalent in a directly related discipline or equivalent combination of education and experience. MS degree in directly related discipline + 4 years of related experience required; OR, PhD degree in a directly related discipline + 2 years of related experience required.
• Prior experience in secure software development. Cybersecurity certification(s) desired, but not required (e.g. CISA, CISM, CISSP).
• Experience in Cloud security concepts and with medical devices, especially IVD systems, desired.
• Knowledge about Windows and .Net technology stack (Java and Linux are a plus).
• Knowledge of cybersecurity regulations, laws and standards for the medical device industry.
• Driven, self-starter with good planning and organizational skills and a strong attention to detail.