Senior Software Engineer - Cybersecurity

Dawar Consulting•Tucson, AZ

2d•Hybrid

About The Position

The Senior Software Engineer – Cybersecurity will provide cybersecurity guidance and oversight to software product development teams, focusing on secure design, risk assessments, vulnerability analysis, and product security throughout the product lifecycle. The role is based at Roche Tissue Diagnostics in Tucson, Arizona, with a hybrid work arrangement: onsite Tuesday through Thursday and remote Monday and Friday. It is a long-term contract with the possibility of conversion and extension.

Requirements

Bachelor’s degree and at least 8 years of related experience, or a master’s degree and at least 4 years of related experience, or a PhD and at least 2 years of related experience.
Experience in secure software development and product cybersecurity.
Knowledge of cybersecurity risk assessments, vulnerability analysis, and security mitigation.
Understanding of cybersecurity regulations, laws, and standards for the medical device industry.
Knowledge of Windows and .NET technologies.
Strong communication, planning, organizational, and problem-solving skills.

Nice To Haves

Experience with medical devices, particularly In Vitro Diagnostics (IVD) systems.
Knowledge of cloud security concepts.
Experience with Java and Linux technologies.
Cybersecurity certifications such as CISSP, CISM, or CISA.
Experience coordinating penetration testing and leading cybersecurity improvement programs.

Responsibilities

Lead and contribute to cybersecurity risk assessments across the product portfolio, including identifying and analyzing risks and verifying mitigation measures.
Advise software development teams on vulnerability impacts, exposure, and remediation strategies.
Provide technical guidance on secure design patterns and appropriate security technologies.
Develop and review security concepts, secure design documentation, and lifecycle security plans.
Coordinate and oversee penetration testing with internal teams and external service providers.
Track security findings, mitigation plans, and remediation activities.
Collaborate with the Product Security & Privacy Organization (PSPO) to communicate security processes and best practices.
Lead department-level cybersecurity improvement initiatives.
Prepare and present product security posture updates to internal stakeholders.