Product Cybersecurity Expert

Embed cybersecurity across the secure product lifecycle for connected medical devices, embedded platforms, firmware, mobile apps, and cloud-based services

Lead threat modeling, product cybersecurity risk assessments, and mitigation planning with global R&D teams

Integrate security checks and tooling into development workflows and CI/CD pipelines to find and address issues early

Drive product vulnerability management for Sonova products, including intake, triage, remediation tracking, and post-market monitoring.

Prepare audit-ready cybersecurity evidence for regulatory submissions and quality processes, including FDA, MDR, and IEC 81001-5-1 expectations

Plan and coordinate security testing with internal teams and external partners; analyze findings and drive remediation

Advise product, engineering, quality, and regulatory stakeholders on practical, risk-based security decisions

Strengthen cybersecurity capability through coaching, security champions, and cross-functional collaboration

5+ years of experience in software engineering, system/software architecture, product development, project management, or Dev Sec Ops , including 3+ years in cybersecurity

Strong practical knowledge of secure SDLC, threat modeling, security assessments, security testing, and vulnerability management

Experience translating security risks and technical findings into clear decisions for engineering, product, quality, and leadership audiences

Understanding of modern development workflows, CI/CD, and how to integrate security without slowing innovation

Knowledge of cryptography, authentication protocols, cloud and software supply chain security

Basic understanding of AI technology and associated threats; hands-on experience using AI technology

Higher-level engineering degree or equivalent experience, with further education or specialization in cybersecurity

Excellent English communication skills and the ability to influence across distributed, cross-functional teams

Experience in medical devices, healthcare, or another regulated product environment

Security certifications such as ISC2/CISSP, GIAC, or equivalent accredited programs

Working knowledge of Privacy by Design principles