Product Cybersecurity Expert

Kitchener(ON) Canada

Product Cybersecurity Expert

Research & Development Hybrid

Help secure the future of connected hearing care. As our Product Cybersecurity Expertin R&D you will help protect the products and digital experiences that improve hearing health and human connection worldwide.

In this role you will combine product cybersecurity expertise with technical leadership responsibilities supporting secure design threat modeling vulnerability managementDevSecOpsintegration and regulatory evidence for connected medical devices while collaborating across global R&D quality regulatory and product teams.

WHAT YOULL DO

• Embed cybersecurity across the secure product lifecycle for connected medical devices embedded platforms firmware mobile apps and cloud-based services

• Lead threat modeling product cybersecurity risk assessments and mitigation planning with global R&D teams

• Integrate security checks and tooling into development workflows and CI/CD pipelines to find and address issues early

• Drive product vulnerability management for Sonova products including intake triage remediation tracking and post-market monitoring.

• Prepare audit-ready cybersecurity evidence for regulatory submissions and quality processes including FDA MDR and IECexpectations

• Plan and coordinate security testing with internal teams and external partners; analyze findings and drive remediation

• Advise product engineering quality and regulatory stakeholders on practical risk-based security decisions

• Strengthen cybersecurity capability through coaching security champions and cross-functional collaboration

WHAT YOU BRING

• 5 years of experience in software engineering system/software architectureproductdevelopment project management orDevSecOps including 3 years in cybersecurity

• Strong practical knowledge of secure SDLC threat modeling security assessments security testing and vulnerability management

• Experience translating security risks and technical findings into clear decisions for engineering product quality and leadership audiences

• Understanding of modern development workflows CI/CD and how to integrate security without slowing innovation

• Knowledge of cryptography authentication protocolscloudandsoftware supply chain security

• Basic understanding of AI technology and associated threats; hands-on experience using AI technology

• Higher-level engineering degree or equivalent experience with further education or specialization in cybersecurity

• Excellent English communication skills and the ability to influence across distributed cross-functional teams

NICE TO HAVE

• Experience in medical devices healthcare or another regulated product environment

• Security certifications such asISC2/CISSP GIAC or equivalent accredited programs

• Working knowledge of Privacy by Design principles