At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters.
The PositionA healthier future. It’s what drives us to innovate. To continuously advance science and ensure everyone has access to the healthcare they need today and for generations to come. Creating a world where we all have more time with the people we love. That’s what makes us Roche.
Are you ready to shape the future of medical device instrument control software? We are seeking a driven Senior Software Engineer in Cybersecurity to join our team at Roche Tissue Diagnostics (RTD) as our Cybersecurity Champion Lead. In this pivotal role, you will work directly with software product development teams to provide guidance and oversight on secure design patterns, risk assessments, and vulnerability analysis. Beyond individual projects, you will also lead department-level initiatives for our cybersecurity uplift program and work directly with the Roche Product Security & Privacy Organization (PSPO). If you have a passion for secure software development, experience with medical device regulations or cloud security, and hold an advanced degree with relevant industry experience, we invite you to help us defend and innovate our next-generation technology.
The Opportunity:
Contribute as a Subject Matter Expert to cybersecurity risk assessments for the RTD product portfolio, including risk identification, risk analysis and verification of risk mitigations.
Consult development teams in analyzing potential impacts and exposure of vulnerabilities.
Contribute technical knowledge to development teams about secure design patterns and the right use of security technologies.
Create and review documentation of security concepts, secure designs and plans to maintain the secure state of the product portfolio throughout its lifecycle.
Manage and oversee penetration tests with internal product teams and external service providers. Assess and track mitigation strategies.
Collaborate with Roche’s Product Security and Privacy Operations group to disseminate process updates and state of the art best practices to product development teams.
Prepare and deliver presentations of product security posture results to large and diverse internal audiences.
Who You Are:
BS degree and least 8 years of related experience or equivalent in a directly related discipline or equivalent combination of education and experience. MS degree in directly related discipline + 4 years of related experience required; OR, PhD degree in a directly related discipline + 2 years of related experience required.
Prior experience in secure software development. Cybersecurity certification(s) desired, but not required (e.g. CISA, CISM, CISSP).
Experience in Cloud security concepts and with medical devices, especially IVD systems, desired.
Knowledge about Windows and .Net technology stack (Java and Linux are a plus).
Knowledge of cybersecurity regulations, laws and standards for the medical device industry.
Driven, self-starter with good planning and organizational skills and a strong attention to detail.
The expected salary range for this position based on the primary location of Tucson, AZ is $104,000 - $193,100. Actual pay will be determined based on experience, qualifications, geographic location, and other job-related factors permitted by law. A discretionary annual bonus may be available based on individual and Company performance. This position also qualifies for the benefits detailed at the link provided below.
Benefits
Relocation benefits are not available for this job posting.
Who we are
A healthier future drives us to innovate. Together, more than 100’000 employees across the globe are dedicated to advance science, ensuring everyone has access to healthcare today and for generations to come. Our efforts result in more than 26 million people treated with our medicines and over 30 billion tests conducted using our Diagnostics products. We empower each other to explore new possibilities, foster creativity, and keep our ambitions high, so we can deliver life-changing healthcare solutions that make a global impact.
Let’s build a healthier future, together.
Roche is an equal opportunity employer. It is our policy and practice to employ, promote, and otherwise treat any and all employees and applicants on the basis of merit, qualifications, and competence. The company's policy prohibits unlawful discrimination, including but not limited to, discrimination on the basis of Protected Veteran status, individuals with disabilities status, and consistent with all federal, state, or local laws.
If you have a disability and need an accommodation in relation to the online application process, please contact us by completing this form Accommodations for Applicants.
Skills Required
- Bachelor’s degree and at least 8 years of related experience, or equivalent education and experience
- Master’s degree in a directly related discipline and at least 4 years of related experience
- PhD in a directly related discipline and at least 2 years of related experience
- Prior experience in secure software development
- Knowledge of Windows and .NET technology stack
- Knowledge of cybersecurity regulations, laws, and standards for the medical device industry
- Cybersecurity certification such as CISA, CISM, or CISSP
- Experience with cloud security concepts
- Experience with medical devices, especially IVD systems
- Knowledge of Java and Linux
- Strong planning, organizational, and attention-to-detail skills
Roche Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Roche and has not been reviewed or approved by Roche.
-
Retirement Support — U.S. materials describe a 401(k) with both matching and an additional company contribution, supported by formal plan documents and true‑up features. This structure is positioned as a standout element of the total package, particularly at Genentech.
-
Leave & Time Off Breadth — Time‑off provisions include substantial vacation, a year‑end shutdown, and a paid six‑week sabbatical after six years. These elements indicate a recharge‑oriented approach within the U.S. offering.
-
Healthcare Strength — Company materials emphasize comprehensive medical, dental, vision, and mental‑health resources alongside well‑being programs. Benefits pages consistently highlight breadth across core health coverage elements.
Roche Insights
What We Do
Roche is a global pioneer in pharmaceuticals and diagnostics focused on advancing science to improve people’s lives. The combined strengths of pharmaceuticals and diagnostics under one roof have made Roche the leader in personalised healthcare – a strategy that aims to fit the right treatment to each patient in the best way possible. Roche is the world’s largest biotech company, with truly differentiated medicines in oncology, immunology, infectious diseases, ophthalmology and diseases of the central nervous system. Roche is also the world leader in in vitro diagnostics and tissue-based cancer diagnostics, and a frontrunner in diabetes management. Founded in 1896, Roche continues to search for better ways to prevent, diagnose and treat diseases and make a sustainable contribution to society. The company also aims to improve patient access to medical innovations by working with all relevant stakeholders. Thirty medicines developed by Roche are included in the World Health Organization Model Lists of Essential Medicines, among them life-saving antibiotics, antimalarials and cancer medicines. Roche has been recognised as the Group Leader in sustainability within the Pharmaceuticals, Biotechnology & Life Sciences Industry ten years in a row by the Dow Jones Sustainability Indices (DJSI).
