Software Engineer in Cybersecurity

We are seeking an experienced Senior Software Engineer Cybersecurity (Cybersecurity Champion Lead) to join our product development team in Tucson, Arizona. In this critical role, you will embed with software engineering teams developing next-generation medical device instrument control software, serving as the technical Subject Matter Expert (SME) for secure design patterns, risk assessments, threat modeling, and vulnerability mitigation.

You will lead department-level cybersecurity uplift programs and partner directly with the global Product Security & Privacy Organization (PSPO) to drive compliance with medical device regulatory frameworks.

Key Responsibilities:

Cybersecurity Risk Assessments: Serve as the technical SME conducting product-level cybersecurity risk assessments, including threat modeling, risk identification, exposure analysis, and verification of mitigation controls across the product portfolio.

Secure Architecture & Design: Consult development teams on implementing secure software design patterns, cryptography, secure coding practices, and defensive software architectures.

Vulnerability Analysis & Pen Testing: Oversee and manage application and system penetration tests with internal teams and external security vendors; evaluate findings and track remediation workflows to resolution.

Documentation & Governance: Author and review comprehensive security concept documents, secure architecture designs, and lifecycle security plans ensuring compliance with medical device standards.

Security Program Leadership: Collaborate with the Product Security and Privacy Operations (PSPO) team to operationalize modern security best practices and present product security posture metrics to cross-functional stakeholders.

Bachelor’s degree in Computer Science, Software Engineering, Cybersecurity, or a related STEM field with 8+ years of related software engineering & security experience; OR

Master’s degree with 4+ years of related experience; OR

PhD with 2+ years of related experience.

Secure Software Engineering: Proven background in secure software development lifecycle (SSDLC), vulnerability analysis, and secure design patterns.

Technology Stack: Solid technical understanding of Windows and .NET / C# environments (Java and Linux exposure is a strong plus).

Work Model / Location: Ability to work on a hybrid schedule in Tucson, AZ (onsite Tuesday through Thursday, remote Monday and Friday). Open to candidates nationwide willing to relocate.

Preferred Qualifications:

Hands-on experience with Medical Device cybersecurity regulations and standards (e.g., FDA Cybersecurity Guidance, IEC 62304, ISO 14971, AAMI TIR57, EU MDR).

Experience with In Vitro Diagnostics (IVD) or instrument control software.

Knowledge of Cloud Security architecture and containerized application security.

Active security certifications: CISSP, CISM, CISA, CSSLP, or CEH.