Senior Software Engineer, Cybersecurity
About The Position
At Roche, we foster a culture where individuals are embraced for their unique qualities, encouraging personal expression, open dialogue, and genuine connections. We value, accept, and respect everyone, enabling them to thrive personally and professionally. Our mission is to prevent, stop, and cure diseases and ensure universal access to healthcare for present and future generations. Join Roche, where every voice matters. We are seeking a driven Senior Software Engineer in Cybersecurity to join our team at Roche Tissue Diagnostics (RTD) as our Cybersecurity Champion Lead. This role is crucial for shaping the future of medical device instrument control software. You will collaborate directly with software product development teams, offering guidance and oversight on secure design patterns, risk assessments, and vulnerability analysis. In addition to project-specific contributions, you will lead department-level initiatives for our cybersecurity uplift program and work closely with the Roche Product Security & Privacy Organization (PSPO). If you are passionate about secure software development, possess experience with medical device regulations or cloud security, and hold an advanced degree with relevant industry experience, we invite you to help us defend and innovate our next-generation technology.
Requirements
- BS degree and least 8 years of related experience or equivalent in a directly related discipline or equivalent combination of education and experience.
- MS degree in directly related discipline + 4 years of related experience required; OR, PhD degree in a directly related discipline + 2 years of related experience required.
- Prior experience in secure software development.
- Knowledge about Windows and .Net technology stack (Java and Linux are a plus).
- Knowledge of cybersecurity regulations, laws and standards for the medical device industry.
- Driven, self-starter with good planning and organizational skills and a strong attention to detail.
Nice To Haves
- Cybersecurity certification(s) desired, but not required (e.g. CISA, CISM, CISSP).
- Experience in Cloud security concepts and with medical devices, especially IVD systems, desired.
Responsibilities
- Contribute as a Subject Matter Expert to cybersecurity risk assessments for the RTD product portfolio, including risk identification, risk analysis and verification of risk mitigations.
- Consult development teams in analyzing potential impacts and exposure of vulnerabilities.
- Contribute technical knowledge to development teams about secure design patterns and the right use of security technologies.
- Create and review documentation of security concepts, secure designs and plans to maintain the secure state of the product portfolio throughout its lifecycle.
- Manage and oversee penetration tests with internal product teams and external service providers. Assess and track mitigation strategies.
- Collaborate with Roche’s Product Security and Privacy Operations group to disseminate process updates and state of the art best practices to product development teams.
- Prepare and deliver presentations of product security posture results to large and diverse internal audiences.
Benefits
- A discretionary annual bonus may be available based on individual and Company performance.
- Relocation benefits are not available for this job posting.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
