Product Cybersecurity Expert

As a Product Cybersecurity Expert, you will play a key role in ensuring cybersecurity is embedded into the development of Sonova's connected hearing solutions—from embedded software and mobile applications to cloud-based services.

Working closely with software engineers, product teams, architects, quality, and regulatory experts, you'll help integrate security into every stage of the product development lifecycle. Rather than focusing on operational IT security, you'll enable engineering teams to build secure products by design, balancing innovation, usability, compliance, and customer trust.

If you have a strong software engineering background and have expanded your expertise into product cybersecurity, this is an opportunity to shape technologies that improve the lives of millions of people worldwide

More about the role : 

• Integrate cybersecurity throughout the Secure Software Development Lifecycle (Secure SDLC) for connected medical devices, embedded software, mobile applications, and cloud services.
• Lead threat modeling activities, cybersecurity risk assessments, and mitigation planning together with global R&D teams.
• Partner with software engineering teams to embed security into development workflows, DevSecOps practices, and CI/CD pipelines.
• Coordinate product vulnerability management activities, including assessment, prioritization, remediation tracking, and post-market monitoring.
• Support regulatory submissions and quality processes by preparing cybersecurity documentation and evidence.
• Advise engineering, product management, quality, and regulatory teams on practical, risk-based cybersecurity decisions.
• Promote a security-first mindset by coaching teams, supporting security champions, and driving continuous improvement across R&D.

More about you:

• Bachelor's or Master's degree in Computer Science, Software Engineering, Engineering, or a related technical discipline (or equivalent practical experience).
• 5+ years of experience in software engineering, software architecture, product development, Secure SDLC, or a comparable software development environment.
• At least 3 years of hands-on experience in product cybersecurity or application security.
• Strong understanding of Secure Software Development Lifecycle (Secure SDLC) and how cybersecurity integrates into modern software development.
• Experience working closely with software development teams throughout the product lifecycle.
• Excellent communication skills with the ability to explain complex security topics to both technical and non-technical stakeholders.
• Professional working proficiency in English.

Nice to have

• Experience developing software for medical devices or other regulated industries.
• Experience with DevSecOps and security integration into CI/CD pipelines.
• Knowledge of cybersecurity standards and regulations such as IEC 81001-5-1, IEC 62304, ISO 14971, MDR, FDA, GDPR, CRA or similar frameworks.
• Security certifications such as CISSP, CSSLP, GIAC, or equivalent.
• Experience with cloud security, cryptography, authentication technologies, or software supply chain security.

More about what we offer :

As one of the world’s leading hearing care providers headquartered in Switzerland, we’re committed to building an inclusive culture. We want to create an environment where you can balance a successful career with your commitments and interests outside of work, through our flexible hybrid working model. We offer a wide range of training opportunities for both your professional and personal development, and there are exceptional growth opportunities with individual development plans.