Hybrid | Valencia, CA
This highly technical role serves as a key subject matter expert (SME) in product cybersecurity, supporting the secure design, development, and maintenance of Advanced Bionics products and services. You will partner cross-functionally across R&D, Quality, Product Development, and Global Cyber Security teams to ensure cybersecurity best practices are embedded into the product lifecycle.
Serve as the SME for product cybersecurity risk assessments, including threat modeling, vulnerability management, impact assessments, and security test planning
Collaborate with the Sonova Global Product Cyber Security Center of Expertise (CoE) to implement cybersecurity strategy and roadmap initiatives
Ensure secure design, development, and maintenance of hardware, embedded software, smart device applications, and PC software products
Lead cybersecurity risk assessments and security verification activities, including code reviews, vulnerability scanning, penetration testing, and validation activities
Monitor evolving cyber threats, regulatory requirements, and industry standards, conducting gap assessments and recommending mitigation strategies
Define and maintain cybersecurity policies, standards, controls, and secure product development practices
Support vulnerability management, incident response activities, and customer complaint investigations related to cybersecurity
Partner with internal and external stakeholders, including regulatory bodies, customers, and cross-functional product teams
Drive continuous improvement and automation of cybersecurity practices, including DevSecOps initiatives
Mentor product development and quality teams on secure product development lifecycle best practices
Bachelor’s degree with 10+ years of relevant experience or Master’s degree with 8+ years of experience in Engineering, Computer Science, Cyber Security, or related technical discipline
10+ years of practical experience in software engineering, SDLC, systems architecture, and project management
5+ years of cybersecurity-related experience
Strong expertise in threat modeling, security assessments, vulnerability management, and secure product development
Excellent analytical, problem-solving, and communication skills
Ability to communicate complex technical cybersecurity concepts to both technical and non-technical audiences
Experience working cross-functionally in a highly collaborative environment
Previous medical device industry experience
Knowledge of secure SDLC, CI/CD, cryptography, authentication and authorization protocols (OAuth2, WebAuthn)
Familiarity with cybersecurity standards and frameworks including OWASP Top 10, SANS CWE-25, GDPR, MDR, FDA, and HIPAA
Experience with programming languages such as C, C++, C#, Java, Swift, Kotlin, TypeScript, Rust, Python, PowerShell, or Bash
Experience with Bluetooth, Wi-Fi, TLS, embedded systems, penetration testing, and wireless protocol security
A minimum of 200Mb/sec download and 10Mb/sec upload speed internet connectivity is required to support any remote/hybrid employee functionality at Sonova
Don't meet all the criteria? If you’re willing to go all in and learn we'd love to hear from you!
We are looking forward to receiving your application via our online job application platform. For this position only direct applications will be considered. Sonova does not recruit via app, telegram, carrier pigeon or any other format that does not include speaking with an actual human. If you are offered a job without speaking with someone please contact Sonova Human Resources
What we offer
This role's pay range is between $131,560/yr - $197,340/yr. This role is also bonus eligible.
*Plan rules/offerings dependent upon group Company/location.
Around 25% of the world’s population is living with hearing loss. At Sonova, we envision a world where everyone enjoys the delight of hearing and lives a life without limitations. From personal audio devices and wireless communication systems to audiological care services, hearing aids, and cochlear implants. Our product brands – Phonak, Unitron, Sennheiser (under license), and Advanced Bionics – create compelling new products to offer the optimal solution for an ever growing consumer base through our globally diversified sales and distribution channels, including our well established global audiological care business. With a presence in over 100 countries and more than 19,000 employees, we leverage our global infrastructure and local roots. We aim for an inclusive work environment and culture that fosters a good balance of family and work-life for everyone. Our workforce is made up of 110 nationalities across 4 generations.
In 2006, Sonova founded the non-profit Hear the World Foundation, which seeks to give children living with hearing loss access to audiological care in low- to middle-income countries.
