Help secure the future of connected hearing care. As our Product Cybersecurity Expert in R&D, you will help protect the products and digital experiences that improve hearing health and human connection worldwide.In this role, you will combine product cybersecurity expertise with technical leadership responsibilities, supporting secure design, threat modeling, vulnerability management, Dev Sec Ops integration, and regulatory evidence for connected medical devices while collaborating across global R&D, quality, regulatory, and product teams.WHAT YOU'LL DO Embed cybersecurity across the secure product lifecycle for connected medical devices, embedded platforms, firmware, mobile apps, and cloud-based servicesLead threat modeling, product cybersecurity risk assessments, and mitigation planning with global R&D teamsIntegrate security checks and tooling into development workflows and CI/CD pipelines to find and address issues earlyDrive product vulnerability management for Sonova products, including intake, triage, remediation tracking, and post-market monitoring.Prepare audit-ready cybersecurity evidence for regulatory submissions and quality processes, including FDA, MDR, and IEC 81001-5-1 expectationsPlan and coordinate security testing with internal teams and external partners; analyze findings and drive remediationAdvise product, engineering, quality, and regulatory stakeholders on practical, risk-based security decisionsStrengthen cybersecurity capability through coaching, security champions,



and cross-functional collaborationWHAT YOU BRING 5+ years of experience in software engineering, system/software architecture, product development, project management, or Dev Sec Ops, including 3+ years in cybersecurityStrong practical knowledge of secure SDLC, threat modeling, security assessments, security testing, and vulnerability managementExperience translating security risks and technical findings into transparent decisions for engineering, product, quality, and leadership audiencesUnderstanding of modern development workflows, CI/CD, and how to integrate security without slowing innovationKnowledge of cryptography, authentication protocols, cloud and software supply chain securityBasic understanding of AI technology and associated threats; hands-on experience using AI technologyHigher-level engineering degree or equivalent experience, with further education or specialization in cybersecurityExcellent English communication skills and the ability to influence across distributed, cross-functional teamsNICE TO HAVE Experience in medical devices, healthcare, or another regulated product environmentSecurity certifications such as ISC2/CISSP, GIAC, or equivalent accredited programsWorking knowledge of Privacy by Design principlesA minimum of 200 Mb/sec download and 10 Mb/sec upload speed internet connectivity is required to support any remote/hybrid employee functionality at Sonova Don't meet all the criteria? If you're willing to go all in and learn we'd love to hear from you!#J-18808-Ljbffr

📌 Product Cybersecurity Expert (Kitchener)
🏢 Sonova
📍 Kitchener