Software Engineer Senior, Cybersecurity

Talent Software Services, Inc.; Tucson (AZ); Hybrid; USD 150,000 - 190,000; Full time

Job summary

Roche Tissue Diagnostics (RTD) is seeking a Senior Software Engineer in Cybersecurity to guide secure design, risk assessments, and vulnerability analysis. You will partner directly with software product teams and the Product Security & Privacy Organization (PSPO) to uplift security across the RTD portfolio in a medical device context.

This role leads department-wide cybersecurity initiatives, manages penetration testing with internal and external teams, and communicates security posture to

Qualifications

• BS degree and at least 8 years of related experience or equivalent across discipline; MS +4 years; PhD +2 years.
• Experience in secure software development with medical device context preferred.
• Knowledge of cybersecurity regulations, standards, and cloud security concepts.

Responsibilities

• Contribute as SME to cybersecurity risk assessments for the RTD product portfolio, including risk identification, analysis and verification of mitigations.
• Consult development teams on potential impacts and exposure of vulnerabilities.
• Contribute technical knowledge about secure design patterns and use of security technologies.
• Create and review documentation of security concepts, secure designs and lifecycle plans.
• Manage and oversee penetration tests with internal teams and external service providers; track mitigation strategies.
• Collaborate with Roche's PSPO to disseminate process updates and best practices to product teams.
• Prepare and deliver presentations of product security posture to diverse internal audiences.

Education

Bachelor's degree in related field

Master's degree in related discipline

PhD degree in directly related discipline

Tools

Cybersecurity certifications (CISA, CISM, CISSP)

Job description

NOTES:

This is a hybrid position: Tue - Thur: onsite, Mon and Fri: remote

Are you ready to shape the future of medical device instrument control software? We are seeking a driven Senior Software Engineer in Cybersecurity to join our team at Roche Tissue Diagnostics (RTD) as our Cybersecurity Champion Lead. In this pivotal role, you will work directly with software product development teams to provide guidance and oversight on secure design patterns, risk assessments, and vulnerability analysis. Beyond individual projects, you will also lead department-level initiatives for our cybersecurity uplift program and work directly with the Roche Product Security & Privacy Organization (PSPO). If you have a passion for secure software development, experience with medical device regulations or cloud security, and hold an advanced degree with relevant industry experience, we invite you to help us defend and innovate our next-generation technology.

The Opportunity:

• Contribute as a Subject Matter Expert to cybersecurity risk assessments for the RTD product portfolio, including risk identification, risk analysis and verification of risk mitigations.


• Consult development teams in analyzing potential impacts and exposure of vulnerabilities.


• Contribute technical knowledge to development teams about secure design patterns and the right use of security technologies.


• Create and review documentation of security concepts, secure designs and plans to maintain the secure state of the product portfolio throughout its lifecycle.


• Manage and oversee penetration tests with internal product teams and external service providers. Assess and track mitigation strategies.


• Collaborate with Roche's Product Security and Privacy Operations group to disseminate process updates and state of the art best practices to product development teams


• Prepare and deliver presentations of product security posture results to large and diverse internal audiences.

Who You Are:

• BS degree and least 8 years of related experience or equivalent in a directly related discipline or equivalent combination of education and experience. MS degree in directly related discipline + 4 years of related experience required; OR, PhD degree in a directly related discipline + 2 years of related experience required.


• Prior experience in secure software development. Cybersecurity certification(s) desired, but not required (e.g. CISA, CISM, CISSP).


• Experience in Cloud security concepts and with medical devices, especially IVD systems, desired


• Knowledge about Windows and .Net technology stack (Java and Linux are a plus).


• Knowledge of cybersecurity regulations, laws and standards for the medical device industry.


• Driven, self-starter with good planning and organizational skills and a strong attention to detail.