Senior Software Engineer - Cybersecurity Champion Lead

Position Overview

We are seeking an experienced Senior Software Engineer to serve as a Cybersecurity Champion Lead, supporting the development and security of medical device instrument control software.

In this role, you will work closely with software development teams to provide guidance on secure software design, cybersecurity risk assessments, vulnerability management, and security best practices. You will also lead department-wide cybersecurity improvement initiatives and collaborate with the Product Security & Privacy Organization (PSPO) to strengthen security across the product portfolio.

The ideal candidate has a strong background in secure software development, cybersecurity risk management, and software security technologies, along with knowledge of medical device cybersecurity regulations and standards.

Key Responsibilities

• Serve as a cybersecurity subject matter expert (SME), supporting risk assessments across the RTD product portfolio, including risk identification, analysis, and verification of mitigation measures.

• Partner with software development teams to identify vulnerabilities, evaluate potential security threats, and recommend appropriate remediation strategies.

• Provide technical guidance on secure software design patterns, security technologies, and best practices throughout the software development lifecycle.

• Develop and review cybersecurity documentation, including security concepts, secure designs, risk assessments, and plans to maintain product security throughout its lifecycle.

• Coordinate and oversee penetration testing activities with internal development teams and external security providers.

• Review penetration testing results, assess identified vulnerabilities, and track remediation efforts through resolution.

• Collaborate with the Product Security & Privacy Organization (PSPO) to communicate cybersecurity process updates, regulatory requirements, and industry best practices.

• Lead department-level cybersecurity improvement initiatives to strengthen the overall security posture of the product portfolio.

• Prepare and present cybersecurity findings, risk assessments, and product security updates to technical teams, management, and other internal stakeholders.

Required Qualifications

Education and Experience

Candidates must meet one of the following requirements:

• Bachelor's degree in a related discipline with at least 8 years of relevant experience.

• Master's degree in a related discipline with at least 4 years of relevant experience.

• PhD in a related discipline with at least 2 years of relevant experience.

• Equivalent combinations of education and directly related experience may be considered.

Technical Requirements

• Professional experience in secure software development and cybersecurity practices.

• Experience conducting cybersecurity risk assessments, identifying vulnerabilities, and implementing security mitigation strategies.

• Knowledge of secure software design principles, security technologies, and vulnerability management.

• Experience working with software development teams to address security concerns throughout the product development lifecycle.

• Knowledge of Windows operating systems and the .NET technology stack.

• Knowledge of cybersecurity regulations, laws, and industry standards applicable to medical devices.

• Ability to develop, review, and maintain technical cybersecurity documentation.

• Strong communication skills with the ability to explain cybersecurity risks and technical findings to diverse audiences.

• Strong organizational, planning, analytical, and problem-solving skills.

• Ability to work independently, manage priorities, and collaborate across multiple teams.

Preferred Qualifications

• Experience with medical device software, particularly in vitro diagnostic (IVD) systems.

• Knowledge of cloud security concepts and technologies.

• Cybersecurity certifications such as CISSP, CISM, or CISA.

• Familiarity with Java and Linux environments.

Ideal Candidate

The ideal candidate is a hands-on software security professional who understands how applications are developed and secured. This individual should be comfortable working directly with software engineers, evaluating cybersecurity risks, coordinating penetration testing, and recommending practical security improvements.

The position requires someone who can take ownership of cybersecurity initiatives, communicate effectively with technical and nontechnical stakeholders, and help ensure medical device software remains secure throughout its lifecycle.