Principal Engineer, Cybersecurity

At Sonova, we envision a world where everyone can enjoy the delight of hearing. This vision inspires us and fuels our commitment to developing innovative solutions that improve hearing health and human connection - from personal audio devices and wireless communication systems to hearing aids and cochlear implants. We're dedicated to providing outstanding customer experiences through our global audiological care services, ensuring that everyone has the opportunity to engage fully with the world around them. Guided by a culture of continuous improvement that fosters resilience and self-motivation, our team is united by a shared commitment to excellence and a deep sense of pride in our work, each of us playing a vital role in creating meaningful change. Here you’ll find a diverse range of opportunities that span both consumer and medical solutions and the freedom to shape your career while making an impact on the lives of others. Join us in our mission to create a more connected world, where every voice is heard and every story matters. Principal Engineer, Product Cyber Security Systems This highly technical role serves as a key subject matter expert (SME) in product cybersecurity, supporting the secure design, development, and maintenance of Advanced Bionics products and services. You will partner cross-functionally across R&D, Quality, Product Development, and Global Cyber Security teams to ensure cybersecurity best practices are embedded into the product lifecycle. What you’ll do Serve as the SME for product cybersecurity risk assessments, including threat modeling, vulnerability management, impact assessments, and security test planning Collaborate with the Sonova Global Product Cyber Security Center of Expertise (CoE) to implement cybersecurity strategy and roadmap initiatives Ensure secure design, development, and maintenance of hardware, embedded software, smart device applications, and PC software products Lead cybersecurity risk assessments and security verification activities, including code reviews, vulnerability scanning, penetration testing, and validation activities Monitor evolving cyber threats, regulatory requirements, and industry standards, conducting gap assessments and recommending mitigation strategies Define and maintain cybersecurity policies, standards, controls, and secure product development practices Support vulnerability management, incident response activities, and customer complaint investigations related to cybersecurity Partner with internal and external stakeholders, including regulatory bodies, customers, and cross-functional product teams Drive continuous improvement and automation of cybersecurity practices, including DevSecOps initiatives Mentor product development and quality teams on secure product development lifecycle best practices What you bring Bachelor’s degree with 10+ years of relevant experience or Master’s degree with 8+ years of experience in Engineering, Computer Science, Cyber Security, or related technical discipline 10+ years of practical experience in software engineering, SDLC, systems architecture, and project management 5+ years of cybersecurity-related experience Strong expertise in threat modeling, security assessments, vulnerability management, and secure product development Excellent analytical, problem-solving, and communication skills Ability to communicate complex technical cybersecurity concepts to both technical and non-technical audiences Experience working cross-functionally in a highly collaborative environment Preferred qualifications Previous medical device industry experience Knowledge of secure SDLC, CI/CD, cryptography, authentication and authorization protocols (OAuth2, WebAuthn) Familiarity with cybersecurity standards and frameworks including OWASP Top 10, SANS CWE-25, GDPR, MDR, FDA, and HIPAA Experience with programming languages such as C, C++, C#, Java, Swift, Kotlin, TypeScript, Rust, Python, PowerShell, or Bash Experience with Bluetooth, Wi-Fi, TLS, embedded systems, penetration testing, and wireless protocol security A minimum of 200Mb/sec download and 10Mb/sec upload speed internet connectivity is required to support any remote/hybrid employee functionality at Sonova What we offer Medical, dental and vision coverage* Health Savings, Health Reimbursement, Flexible Spending/Dependent Care Accounts TeleHealth options 401k plan with company match* Company paid life/ad&d insurance Additional supplemental life/ad&d coverage available Company paid Short/Long-Term Disability coverage (STD/LTD) STD LTD Buy-ups available Accident/Hospital Indemnity coverage Legal/ID Theft Assistance PTO (or sick and vacation time), floating Diversity Day, & paid holidays* Paid parental bonding leave Employee Assistance Program (24/7 mental health support hotline, 5 company paid counseling sessions and more) Robust Internal Career Growth opportunities Hearing aid discount for employees and family Internal social recognition platform This role's pay range is between $131,560/yr - $197,340/yr. This role is also bonus eligible. Sonova is an equal opportunity employer We team up. We grow talent. We collaborate with people of diverse backgrounds to win with the best team in the market place. We guaranteeevery person equal treatment in regard to employment and opportunity for employment, regardless of a candidate’s ethnic or national origin, religion, sexual orientation or marital status, gender, genetic identity, age, disability or any other legally protected status. #J-18808-Ljbffr Sonova